fedora-infrastructure

#8012 Bad X-Frame-Options header on docs.stg.pagure.org
Closed: Fixed by pingou. Opened by jlanda.

Closed: Fixed
Reopen Issue

I'm getting

Load denied by X-Frame-Options: https://pagure.io/ does not permit framing by https://stg.pagure.io/docs/pagure/.

when I try to visit the embedded docs on stg.pagure.io .

The problem is here: https://infrastructure.fedoraproject.org/cgit/ansible.git/tree/roles/pagure/frontend/templates/securityheaders.conf?id=72e5a61#n1 where https://pagure.io is hardcoded as unique origin for both environments.

I'll try to upload a patch here when kids allows me :)

0001-Pagure-proper-X-Frame-Options-header-in-staging.patch

this should work

Looks good to me, applied :)

 
X-Frame-Options: ALLOW-FROM https://stg.pagure.io/

Fixed and deployed :)

Metadata Update from @pingou:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Lowest
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.