Changed installation script so tornado supports CSP frame ancestors property

enicolasgomez · enicolasgomez · commit d3ec7685bbfd · 2023-12-05T15:05:05.000-03:00
diff --git a/utilities/install.py b/utilities/install.py
@@ -171,6 +171,7 @@ def main(netpyne_branch, workspace_branch, geppetto_branch=None, skipNpm=False,
             _ = config['NotebookApp']['tornado_settings']
         except KeyError:
             config['NotebookApp']['tornado_settings'] = {}
+        config['NotebookApp']['tornado_settings']['headers'] = { 'Content-Security-Policy': "frame-ancestors 'self' *" }
         config['NotebookApp']['tornado_settings']['gzip'] = True
         f.seek(0)
         json.dump(config, f, indent=4, sort_keys=True)
diff --git a/webapp/test-frame/index.html b/webapp/test-frame/index.html
@@ -0,0 +1,17 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <title>IFrame NePyNE-UI</title>
+</head>
+<body>
+
+<h2>IFrame NePyNE-UI</h2>
+
+<!-- IFrame element -->
+<iframe src="http://localhost:8888/geppetto" width="1200" height="1200">
+    <!-- Alternative content for browsers that do not support iframes -->
+    <p>Your browser does not support iframes.</p>
+</iframe>
+
+</body>
+</html>
