Qlik Sense: using " X-Frame-Options: ALLOW-FROM" limitation

[Joseph_Musekura]

In Qlik Sense Management Console, using X-Frame-Options and Content-Security-Policy, you can allow Qlik Sense objects to be embedded in an iFrame only from a specific websites

For "X-Frame-Options" the possible values are “DENY”, “SAMEORIGIN” or “ALLOW-FROM”. 

Example using "ALLOW-FROM” value.

However, there is a limitation when using “ALLOW-FROM”.

 

Related Content

• Mitigating against clickjacking in Qlik Sense, X-FRAME Options in response header
• How to allow Qlik Sense to be embedding in an iFrame only from specific websites