Embedding an Apache Superset Dashboards in a different origin website using Talisman...

I am trying to Embed an Apache Superset Dashboard on another angular app deployed on a different host using an iFrame.

The angular app tries to retrieve the dashboard but i run into an error

X-Frame-Option sameorigin does not allow the display of iFrame


My Superset configuration includes TALISMAN configuration

TALISMAN_CONFIG = {
"content_security_policy": {
"base-uri": ["'self'"],
"default-src": ["'self'"],
"img-src": [
"'self'"
],
"font-src": [
"'self'"
],
"worker-src": ["'self'", "blob:"],
"connect-src": [
"'self'"
],
"object-src": "'none'",
"style-src": [
"'self'",
"'unsafe-inline'"
],
"script-src": [
"'self'",
"'strict-dynamic'",
"'unsafe-inline'",
"'unsafe-eval'"
],
"frame-ancestors": [
"'self'",
os.getenv('BASE_URL_EXTERNAL_APP'),
]
},
"content_security_policy_nonce_in": ["script-src"],
"force_https": True,
"force_https_permanent": False,
"session_cookie_secure": False,
}

Continue reading...