Customize Content Security Policy

Graylog Central (peer support)
1

Hi,

I developped a web plugin which is embedding an iframe.

However the iframe loading is blocked by Content Security Policy set to default-src.

It seems to be a new security parameter as I did not encounter this error on graylog 5.0.8.

The current version of graylog I’m working on is 5.1.4.

Does any parameter officially exist for customizing th CSP ?

Screenshot from 2023-10-23 16-05-44
Screenshot from 2023-10-23 16-05-441777×321 34.3 KB

2

I discovered the new parameter http_allow_embedding.

https://go2docs.graylog.org/5-0/upgrading_graylog/upgrading_to_graylog_5.0.x.htm

However it did not fix the problem once parameter set to true.

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.