R |
Riccardo Brunetti |
Dear DirectAdmin support
We need to load directadmin into an iframe contained on different origins.
So far we used the following setting in directadmin.conf:
x_frame_options="allow-from ..."
It seems that now the allow-from directive has become obsolete and most of the browsers refuse to observe it (developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options).
We need to add the "Content-security-policy" header and set a "frame-ancestor" directive.
How can I make it in directadmin?
Thanks a lot