ERPNext Conference 2019* ERPNext.com Blog

Issues with X-Frame-Options Header Sent from ERPNext


#1

Good day all,

Love the product, btw!

Anyway, I have some custom forms developed, and would like to link them directly in the main site (which runs on wordpress in this case)…

My problem is the ErpNext install is setting the X-Frame-Options header to only ready “ORIGINONLY”. Now, ERPnext is installed on a different domain than the rest of the site for complex reasons.

I’ve attempted to fix this by changing nginx.conf and removing the add_header directives that are setting X-Frame-Options, but it’s still setting them…

Is there somewhere in frappe/erpnext/bench that is sending this header?

Thanks
Chris