Strapiv4 <iframe>

Questions and Answers
1
System Information
  • Strapi Version:
  • Operating System:
  • Database:
  • Node Version:
  • NPM Version:
  • Yarn Version:

I’m trying to upload a pdf file to pass via iframe, but I’m getting this error:Refused to frame 'my url ’ because an ancestor violates the following Content Security Policy directive: “frame-ancestors ‘self’” and on the right side I I took any pdf from the internet and it works in my application

chrome
chrome1920×892 212 KB

2

You need to change the strapi::security middleware to allow for it to not break it

3

how can this be done?

4

I meant cors

5

ok, thank you very much I will test and if it works I will bring the answer

6

Code example.
{
name: “strapi::security”,
config: {
contentSecurityPolicy: {
useDefaults: true,
directives: {
“script-src”: [“‘self’”, “https:”, “http:”],
“frame-src”: [“‘self’”, “https:”, “http:”],
“frame-ancestors”: [“‘self’”, “https:”, “http:”],
},
},
}
},

7

Good morning, a simple and effective solution, I did it like this:<iframe
src={https://docs.google.com/viewer?url=https:your url here&embedded=true}
height=“100%”
width=“100%”
>