ruby on rails - Nginx X-Frame-Options -

-

i use nginx 1.8.0 under centos 6.7 serving ruby on rails 4.2.3 application.

the problem:

i need enable iframe options domains tried this:

x-frame-options: *

then when check headers see twice 1 time sameorigin , 1 time *, here response:

http/1.1 200 ok server: nginx/1.8.0 date: sun, 01 nov 2015 15:48:32 gmt content-type: text/html; charset=utf-8 connection: keep-alive status: 200 ok strict-transport-security: max-age=31536000 x-frame-options: sameorigin x-xss-protection: 1; mode=block x-content-type-options: nosniff etag: w/"d14b3de05fb18ebe4a94774c8f209e7f" cache-control: max-age=0, private, must-revalidate set-cookie: guess_locale=en; path=/; secure set-cookie: _admin_numgames_com_session=y3n0qjr2nxy0vflzmlvnmhjlzc9wbuvraldzyjhpeho0ug41akpaze1rb0tqws9yegpkckltrmviuu5avmjpuelccwpmafjwqmpiwhrsazi4te9qdtgvq2vvrgyrsw9vcja4ewvcmvlsuhjrejr1wmnoqwzol2hgeva1zhp5ywxpdfz4s25ydettamvnbflzmehjrddxalq2mu93t24vwnr6b28wm0nvys82nm1xmgv2njh4djizr1rnb2w3wtvhudm3cvl3nnvrqnj1wtmyu3i4dvbjy3rorwrqslk2vmhnvnrvelzrbhrvwt0tlu9dyvbizuxouxlln2vmz01vnehab3c9pq%3d%3d--fa2a9d6817b5464b82a2babd784ed098f2526eeb; path=/; secure; httponly x-request-id: 4762503a-a9a8-41ce-b1a7-26269b7e9184 x-runtime: 0.963198 x-frame-options: *

there 1 time declare option why see twice? , how remove option 1 able use domain iframe?

ok found solution , rails problem sent header, needed add production.rb file:

config.action_dispatch.default_headers = {     'x-frame-options' => 'allowall' }

Comments

Post a Comment

Popular posts from this blog

javascript - Slick Slider width recalculation -

-
i'm trying add slide in panel on slick container css. carousel works except new width not being calculated when space has been added. recalibrate once advance next slide i'd happen each time panel opened or closed. i've tried adding both margin , padding, neither makes difference. ideas? https://jsfiddle.net/mhigley/dpf7mlpl/ html: <button type="button" id="button"><i class="fa fa-arrow-right"></i></button> <aside> <h2>slide in panel</h2> <ol> <li>list item</li> <li>list item</li> <li>list item</li> <li>list item</li> <li>list item</li> </ol> </aside> <main role="main"> <div class="sections"> <section> <article> <h2>first slide</h2> <p>lorem ipsum d...
Read more

jsf - PrimeFaces Datatable - What is f:facet actually doing? -

-
looking through primefaces code in app noticed following line: <f:facet name="header">#{trainsearch.traincount} trains</f:facet> it looks overriding header, makes sense, can explain me in little more detail? what happening line of code? complete code listed below: <p:datatable id = "results" value = "#{trainsearch.trains}" var = "train" rendered="#{not empty trainsearch.trains}" styleclass = "train-search-table horizontal-border"> <f:facet name="header">#{trainsearch.traincount} trains</f:facet> <p:column headertext = "train id"> <p:panelgrid columns="1" styleclass = "train-id-grid" layout = "grid"> <h:outputtext styleclass = "train-id-label" value="#{train.traini}"/> <h:outputtex...
Read more

angular2 services - Angular 2 RC 4 Http post not firing -

-
i trying fire post request app , it's not working, tried multiple ways. don't see request being fired under network tab in chrome. not sure problem is, appreciated. import { injectable } '@angular/core'; import { http, headers } '@angular/http'; @injectable() export class userservice{ private _url="users"; constructor(private _http: http){ } checkifusernameexists(username){ return this._http.get(this._url+"/"+username) .map(response => response.json()) } createuser(user){ let headers = new headers(); headers.append('content-type', 'application/json') console.log(json.stringify(user)); return this._http.post(this._url, json.stringify(user),{headers: headers}) .map(response => response.json()) } } first need capture error , solve error: this._http.post(this._url, json.stringify(user),{headers: headers}) .subscribe( ...
Read more