[ 
https://issues.apache.org/jira/browse/NIFI-9171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17435113#comment-17435113
 ] 

David Handermann commented on NIFI-9171:
----------------------------------------

[~sukhwinder13] Following up on this issue, since you are using Apache HTTP as 
a proxy in front of NiFi, it is possible to use the 
[mod_header|http://httpd.apache.org/docs/current/mod/mod_headers.html#header] 
module to add a {{Header Content-Security-Policy}} directive to your 
configuration. The Mozilla Development Network documentation provides some 
helpful details on the 
[frame-src|https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-src]
 property.

> Access Nifi URL under iframe
> ----------------------------
>
>                 Key: NIFI-9171
>                 URL: https://issues.apache.org/jira/browse/NIFI-9171
>             Project: Apache NiFi
>          Issue Type: Task
>          Components: Configuration Management, Security
>    Affects Versions: 1.13.1
>         Environment: Ubuntu
>            Reporter: sukhwinder kaur
>            Assignee: David Handermann
>            Priority: Major
>              Labels: security
>
> Hi 
> While accessing the Nifi URL under iframe getting following error
> Refused to frame 'https://localhost:9443/' because an ancestor violates the 
> following Content Security Policy directive: "frame-ancestors 'self'".
>  I have setup Nifi with certificate.
>  
> can you please help with proxy pass file for nifi ?
> I have tried : 
> https://nifi.apache.org/docs/nifi-docs/components/nifi-docs/html/administration-guide.html#how-to-install-and-start-nifi
>  !https://i.imgur.com/Qhghsdy.png!
>  
>  
>  
> Not working.
>  
> THanks



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to