Top Menu

Jump to content
Home
    Modules
      • Projects
      • Activity
      • Work packages
      • Gantt charts
      • Calendars
      • Team planners
      • Boards
      • News
    • Getting started
    • Introduction video
      Welcome to OpenProject Community
      Get a quick overview of project management and team collaboration with OpenProject. You can restart this video from the help menu.

    • Help and support
    • Upgrade to Enterprise edition
    • User guides
    • Videos
    • Shortcuts
    • Community forum
    • Enterprise support

    • Additional resources
    • Data privacy and security policy
    • Digital accessibility (DE)
    • OpenProject website
    • Security alerts / Newsletter
    • OpenProject blog
    • Release notes
    • Report a bug
    • Development roadmap
    • Add and edit translations
    • API documentation
  • Sign in
      Forgot your password?

      or sign in with your existing account

      Google

Side Menu

  • Overview
  • Activity
    Activity
  • Roadmap
  • Work packages
    Work packages
  • Gantt charts
    Gantt charts
  • Calendars
    Calendars
  • Team planners
    Team planners
  • Boards
    Boards
  • News
  • Forums

Content

General discussion
  1. OpenProject
  2. Forums
  3. General discussion
  4. OP in an iframe

OP in an iframe

Added by Michael Freitter almost 6 years ago

Hello,

it is possible to show OpenProject in an iframe?
I use nextcloud an in this application, it is possible to integrate other application with iframe.

Thanks!


Replies (4)

RE: OP in an iframe - Added by Oliver Günther almost 6 years ago

Hi Michael,

our Content-Security Policy prohibits other origins embedding OpenProject as an iFrame. However in a local installation, you can freely modify this value here to your liking https://github.com/opf/openproject/blob/27564608db96fa5854620d1c6e74335aac647651/config/initializers/secure_headers.rb#L58

So to answer your question: Yes, with modifications.

We could make this a configuration option to allow you to add additional frame ancestors.

Best,

Oliver

RE: OP in an iframe - Added by Michael Freitter almost 6 years ago

Hi Oliver,

thank you for your answer!

Yes, I have a local installation.

>frame_ancestors: %w('self'),

1. What parameter should I do, or should I make a comment (#) character?

2. After the code changing, what steps must I do to bring this change to the running application?

Thanks

   Michael

RE: OP in an iframe - Added by Oliver Günther almost 6 years ago

For example, set it to https://your.domain that is the one embedding OpenProject.

See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors for more details

Further up there is also the setting x_frame_options = 'SAMEORIGIN' which you may need to set to your domain as well with allow-from _uri_

It's a bit doubled to the the difference in support by browsers for CSP2

RE: RE: OP in an iframe - Added by Bharath R almost 4 years ago

Hi,

I tried to load my application in iframe but it's not coming it's showing 

Refused to frame 'http://localhost:4200/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors *".

like this error is coming and i follow the instructions based on this link(https://community.openproject.org/topics/11130)

Please let me this solution for this.

Thanks,

Bhararth

  • (1 - 4/4)
Loading...