On 11/14/18 2:39 PM, Arnaud L. wrote:
Hi list !

As per the documentation here : https://docs.geoserver.org/latest/en/user/production/config.html#x-frame-options-policy I have tried to disable the X-Frame-Options in web.xml (using Apache Tomcat 9.0), but no success. Is this the correct syntax ?

    <filter>
      <filter-name>xFrameOptionsFilter</filter-name>

<filter-class>org.geoserver.filters.XFrameOptionsFilter</filter-class>
      <init-param>
<param-name>geoserver.xframe.shouldSetPolicy</param-name>
        <param-value>false</param-value>
      </init-param>
    </filter>

the code seems to be looking for a property named "geoserver.xframe.policy", see: https://github.com/geoserver/geoserver/blob/master/src/main/src/main/java/org/geoserver/filters/XFrameOptionsFilter.java#L38

alternatively you could remove the filter, tough setting as an environment variable will be easier when upgrading

-M

_______________________________________________
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to