Hello, 

Since i upgraded my CAS backend and frontend, some of our websites, embbeding 
CAS protected services as iframes, are now throwing an error message : 

"Load denied by X-Frame options" 

CAS is 5.1.5 
Frontend is Apache 2.4.10 

I tried : 

Header set X-Frame-Options "ALLOW-FROM=https://websitewithiframe.tld"; 
In the Apache configuration 

cas.httpWebRequest.header.xframe=true 
In CAS configuration 

But none of these get rid of the error. 
Did someone already encountered this problem ? 

-- 
Sébastien BEAUDLOT 

Administrateur réseaux, téléphonie et flotte mobile 

Direction Opérationnelle des Systèmes d'Information ( DOSI ) 
Pôle Infrastructures 
Université d'Avignon et des Pays de Vaucluse 

Tèl : 04.90.16.26.04 
-- 

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1358067654.549545.1513063988344.JavaMail.zimbra%40univ-avignon.fr.

Reply via email to