On 11/15/18 8:13 PM, mark wrote:
On 11/14/18 2:39 PM, Arnaud L. wrote:
Hi list !
As per the documentation here :
https://docs.geoserver.org/latest/en/user/production/config.html#x-frame-options-policy
I have tried to disable the X-Frame-Options in web.xml (using Apache
Tomcat 9.0), but no success. Is this the correct syntax ?
<filter>
<filter-name>xFrameOptionsFilter</filter-name>
<filter-class>org.geoserver.filters.XFrameOptionsFilter</filter-class>
<init-param>
<param-name>geoserver.xframe.shouldSetPolicy</param-name>
<param-value>false</param-value>
</init-param>
</filter>
the code seems to be looking for a property named
"geoserver.xframe.policy", see:
https://github.com/geoserver/geoserver/blob/master/src/main/src/main/java/org/geoserver/filters/XFrameOptionsFilter.java#L38
actually this is wrong, it looks to parse a boolean from
geoserver.xframe.shouldSetPolicy
https://github.com/geoserver/geoserver/blob/94d8bca73b5e1a7438117b1aa2fb519b6ae4e3a4/src/main/src/main/java/org/geoserver/filters/XFrameOptionsFilter.java#L33-L35
alternatively you could remove the filter, tough setting as an
environment variable will be easier when upgrading
-M
_______________________________________________
Geoserver-users mailing list
Please make sure you read the following two resources before posting to this
list:
- Earning your support instead of buying it, but Ian Turton:
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines:
http://geoserver.org/comm/userlist-guidelines.html
If you want to request a feature or an improvement, also see this:
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
