GitHub user dosubot[bot] added a comment to the discussion: Refused to display 
'http://localhost:8080/' in a frame because it set 'X-Frame-Options' to 
'sameorigin'.

<!-- Greeting -->
Hello @4869conan! I'm [Dosu](https://dosu.dev), your friendly bot here to help 
you solve bugs, answer questions, and become a contributor. I'm ready to assist 
you while you wait for a human maintainer. Let's tackle this issue together!

<!-- Answer -->
To resolve the "X-Frame-Options: sameorigin" error when embedding an Apache 
Superset dashboard, you can try the following steps:

1. **Modify HTTP Headers in `superset_config.py`:**
   Add or modify the `HTTP_HEADERS` configuration to allow framing:
   ```python
   HTTP_HEADERS = {
       'X-Frame-Options': 'ALLOWALL'
   }
   ```

2. **Configure Content Security Policy (CSP):**
   Ensure that your `superset_config.py` includes a CSP configuration that 
allows your domain:
   ```python
   TALISMAN_CONFIG = {
       'content_security_policy': {
           'frame-ancestors': ['your-domain-here']
       }
   }
   ```
   Replace `'your-domain-here'` with the actual domain where the dashboard will 
be embedded.

3. **Restart Superset:**
   After making these changes, restart your Superset instance to apply the new 
configuration.

These steps should help resolve the issue by allowing the Superset dashboard to 
be embedded in your Spring Boot project.


<!-- Dosu Comment Footer -->
*To continue talking to [Dosu](https://dosu.dev), mention @dosu.*

---
<sup>Help Dosu learn! Give it feedback: [Great 
Response](https://app.dosu.dev/response-feedback/ca8cdd77-3afc-45eb-b091-1016f208d711?feedback_type=great_response)
 | [Irrelevant 
Answer](https://app.dosu.dev/response-feedback/ca8cdd77-3afc-45eb-b091-1016f208d711?feedback_type=irrelevant_answer)
 | [Incorrect 
Sources](https://app.dosu.dev/response-feedback/ca8cdd77-3afc-45eb-b091-1016f208d711?feedback_type=incorrect_sources)
 | [Too 
Verbose](https://app.dosu.dev/response-feedback/ca8cdd77-3afc-45eb-b091-1016f208d711?feedback_type=too_verbose)
 | 
[Hallucination](https://app.dosu.dev/response-feedback/ca8cdd77-3afc-45eb-b091-1016f208d711?feedback_type=hallucination)
 | [Bug 
Report](https://app.dosu.dev/response-feedback/ca8cdd77-3afc-45eb-b091-1016f208d711?feedback_type=bug_report)
 | 
[Other](https://app.dosu.dev/response-feedback/ca8cdd77-3afc-45eb-b091-1016f208d711?feedback_type=other)</sup>


GitHub link: 
https://github.com/apache/superset/discussions/33383#discussioncomment-13070276

----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: 
notifications-unsubscr...@superset.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org
For additional commands, e-mail: notifications-h...@superset.apache.org

Reply via email to