daniel-ac-martin / NotGovUK

An implementation of the GOV.UK Design System in React that provides support for writing internal applications in addition to public ones.

Home Page:https://not-gov.uk/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Make it possible to relax various security mechanisms

daniel-ac-martin opened this issue · comments

e.g. Accessibility want to allow pages to be displayed in an iFrame.

The error:

Refused to frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'".
It's to do with the headers set (can also be X-Frame-Options: DENY, this is the same)