Werk #9497: Allow webconf to be displayed in frame

Component Firmware
Title Allow webconf to be displayed in frame
Date Dec 8, 2022
Appliance Version 1.5.6 1.6.0
Level Trivial Change
Class Bug Fix
Compatibility Compatible - no manual interaction needed

The Content-Security-Policy, introduced with CMA 1.5.5, did not allow webconf to be displayed in frames. This rendered the Checkmk Appliance sidebar snapin in Checkmk unusable.

This is fixed now.

If you cannot update you can create a custom config in /etc/apache2/conf-enabled/ e.g. werk9497.conf with the following contents:

/etc/apache2/conf-enabled/werk9497.conf

# Delete this file as soon as Werk #9497 was applied
Header edit Content-Security-Policy "frame-ancestors 'none';" "frame-ancestors 'self';"
Header edit X-Frame-Options deny sameorigin

Please delete this file as soon as you updated.

To the list of all Werks