Uploaded image for project: 'Camunda Optimize'
  1. Camunda Optimize
  2. OPT-6562

Optimize shared dashboard refuses to display in iframe in SaaS env

    • Icon: Bug Report Bug Report
    • Resolution: Fixed
    • Icon: L3 - Default L3 - Default
    • 3.10.0-alpha4, 3.10.0
    • None
    • backend
    • None
    • Not defined

      *Brief summary of the bug. What is it ? Where is it ?
      In Optimize Saas env,
      When sharing a dashboard using the Embed function, it no longer displays in an iframe on version 3.8.x / 3.9.x/3.10.x to latest.

      *Steps to reproduce:
      Open one of the Optimize clusers in cloud and open Optimize
      Create any dashboard in Optimize and then click Share -> Embed Link
      Create a local html file and paste the contents of the Embed Link cliboard somewhere in the <body> tag of the html.
      Try to view the html file locally and you get an error message: "localhost refused to connect."
      Try this again in version 3.4.0 and the iframe is displayed correctly, showing the dashboard

      *Actual result :
      Error message:
      refused to display in an iframe because it set 'X-Frame-Options' to 'deny'
      Example: https://jsfiddle.net/xz67c9kj/

      Expected result:
      Dashboard shows up in the embedded area.

      Notes:
      Looking at the browser (F12) Network info, the failing version has a new Response Header including 'X-Frame-Options: DENY'

        This is the controller panel for Smart Panels app

            [OPT-6562] Optimize shared dashboard refuses to display in iframe in SaaS env

            Omran Abazeed created issue -
            Omran Abazeed made changes -
            Link New: This issue is related to OPT-5568 [ OPT-5568 ]
            Omran Abazeed made changes -
            Description Original: Brief summary of the bug. What is it ? Where is it ?
            In Optimize Saas env,
            When sharing a dashboard using the Embed function, it no longer displays in an iframe on version 3.8.x / 3.9.x/3.10.x to latest.

            Steps to reproduce:
            Open one of the Optimize clusers in cloud and open Optimize
            Create any dashboard in Optimize and then click Share -> Embed Link
            Create a local html file and paste the contents of the Embed Link cliboard somewhere in the <body> tag of the html.
            Try to view the html file locally and you get an error message: "localhost refused to connect."
            Try this again in version 3.4.0 and the iframe is displayed correctly, showing the dashboard
             
            Actual result :
            Error message:
            refused to display in an iframe because it set 'X-Frame-Options' to 'deny'
            Example: https://jsfiddle.net/xz67c9kj/


            Expected result:
            Dashboard shows up in the embedded area.

            Notes:
             Looking at the browser (F12) Network info, the failing version has a new Response Header including 'X-Frame-Options: DENY'
            New: *Brief summary of the bug. What is it ? Where is it ?
            In Optimize Saas env,
            When sharing a dashboard using the Embed function, it no longer displays in an iframe on version 3.8.x / 3.9.x/3.10.x to latest.

            *Steps to reproduce:
            Open one of the Optimize clusers in cloud and open Optimize
            Create any dashboard in Optimize and then click Share -> Embed Link
            Create a local html file and paste the contents of the Embed Link cliboard somewhere in the <body> tag of the html.
            Try to view the html file locally and you get an error message: "localhost refused to connect."
            Try this again in version 3.4.0 and the iframe is displayed correctly, showing the dashboard
             
            *Actual result :
            Error message:
            refused to display in an iframe because it set 'X-Frame-Options' to 'deny'
            Example: https://jsfiddle.net/xz67c9kj/


            Expected result:
            Dashboard shows up in the embedded area.

            Notes:
             Looking at the browser (F12) Network info, the failing version has a new Response Header including 'X-Frame-Options: DENY'
            Joshua Windels made changes -
            Status Original: Triage [ 10612 ] New: Backlog [ 11212 ]
            Joshua Windels made changes -
            Status Original: Backlog [ 11212 ] New: Ready [ 10005 ]
            Joshua Windels made changes -
            Assignee New: Andromachi Rozaki [ andromachi.rozaki ]
            Andromachi Rozaki made changes -
            Status Original: Ready [ 10005 ] New: In Development [ 10312 ]
            Andromachi Rozaki made changes -
            Assignee Original: Andromachi Rozaki [ andromachi.rozaki ] New: Joshua Windels [ joshua.windels ]
            Status Original: In Development [ 10312 ] New: In Review [ 10212 ]
            Joshua Windels made changes -
            Assignee Original: Joshua Windels [ joshua.windels ] New: Cigdem Ilhan [ cigdem.ilhan ]
            Status Original: In Review [ 10212 ] New: In Test [ 10004 ]
            Cigdem Ilhan made changes -
            Assignee Original: Cigdem Ilhan [ cigdem.ilhan ]
            Resolution New: Fixed [ 1 ]
            Status Original: In Test [ 10004 ] New: Done [ 10010 ]
            Joshua Windels made changes -
            Fix Version/s New: 3.10.0-alpha4 [ 17993 ]

              Unassigned Unassigned
              omran.abazeed Omran Abazeed
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: