Werk #9497: Allow webconf to be displayed in frame

Komponente Firmware
Titel Allow webconf to be displayed in frame
Datum 08.12.2022
Appliance Version 1.5.6 1.6.0
Level Kleine Änderung
Klasse Bugfix
Kompatibilität Kompatibel - benötigt kein manuelles Eingreifen

The Content-Security-Policy, introduced with CMA 1.5.5, did not allow webconf to be displayed in frames. This rendered the Checkmk Appliance sidebar snapin in Checkmk unusable.

This is fixed now.

If you cannot update you can create a custom config in /etc/apache2/conf-enabled/ e.g. werk9497.conf with the following contents:

/etc/apache2/conf-enabled/werk9497.conf

# Delete this file as soon as Werk #9497 was applied
Header edit Content-Security-Policy "frame-ancestors 'none';" "frame-ancestors 'self';"
Header edit X-Frame-Options deny sameorigin

Please delete this file as soon as you updated.

Zur Liste aller Werks