Top Menu

Jump to content
    Modules
      • Projects
      • Activity
      • Work packages
      • Gantt charts
      • Calendars
      • Team planners
      • Boards
      • News
    Home
    • Getting started
    • Introduction video
      Welcome to OpenProject Community
      Get a quick overview of project management and team collaboration with OpenProject. You can restart this video from the help menu.

    • Help and support
    • Upgrade to Enterprise edition
    • User guides
    • Videos
    • Shortcuts
    • Community forum
    • Enterprise support

    • Additional resources
    • Data privacy and security policy
    • Digital accessibility (DE)
    • OpenProject website
    • Security alerts / Newsletter
    • OpenProject blog
    • Release notes
    • Report a bug
    • Development roadmap
    • Add and edit translations
    • API documentation
  • Sign in
      Forgot your password?

      or sign in with your existing account

      OpenProject ID Google

Side Menu

Collapse project menu

  • Overview
  • Activity
    Activity
  • Roadmap
  • Work packages
    Work packages
  • Gantt charts
    Gantt charts
  • Calendars
    Calendars
  • Team planners
    Team planners
  • Boards
    Boards
  • News
  • Forums

Content

Expand project menu
General discussion
  1. OpenProject Community
  2. OpenProject
  3. Forums
  4. General discussion
  5. OP in an iframe

OP in an iframe

Added by Michael Freitter about 6 years ago

Hello,

it is possible to show OpenProject in an iframe?
I use nextcloud an in this application, it is possible to integrate other application with iframe.

Thanks!


Replies (4)

RE: OP in an iframe - Added by Oliver Günther about 6 years ago

Hi Michael,

our Content-Security Policy prohibits other origins embedding OpenProject as an iFrame. However in a local installation, you can freely modify this value here to your liking https://github.com/opf/openproject/blob/27564608db96fa5854620d1c6e74335aac647651/config/initializers/secure_headers.rb#L58

So to answer your question: Yes, with modifications.

We could make this a configuration option to allow you to add additional frame ancestors.

Best,

Oliver

RE: OP in an iframe - Added by Michael Freitter about 6 years ago

Hi Oliver,

thank you for your answer!

Yes, I have a local installation.

>frame_ancestors: %w('self'),

1. What parameter should I do, or should I make a comment (#) character?

2. After the code changing, what steps must I do to bring this change to the running application?

Thanks

   Michael

RE: OP in an iframe - Added by Oliver Günther about 6 years ago

For example, set it to https://your.domain that is the one embedding OpenProject.

See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors for more details

Further up there is also the setting x_frame_options = 'SAMEORIGIN' which you may need to set to your domain as well with allow-from _uri_

It's a bit doubled to the the difference in support by browsers for CSP2

RE: RE: OP in an iframe - Added by Bharath R almost 4 years ago

Hi,

I tried to load my application in iframe but it's not coming it's showing 

Refused to frame 'http://localhost:4200/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors *".

like this error is coming and i follow the instructions based on this link(https://community.openproject.org/topics/11130)

Please let me this solution for this.

Thanks,

Bhararth

  • (1 - 4/4)
Loading...