[ckan-dev] resource_proxy not working

[David Thompson]

On 30/08/18 02:39, Biz Tweets wrote:
>   I am running ckan 2.7.3 and i enabled resource_proxy and webpage_view
>   in my plugins production.ini.
> 
>   But i still get the error in my console view when loading the page below.
> 
>   Refused to display 'https://www.newegg.com/' in a frame because it set
>   'X-Frame-Options' to 'sameorigin'.
> 
>   Any idea why it might not be working?

You might want to check out the CORS settings. If you've got a
same-origin policy, then you need to explicitly allow content with other
origins. (This is a security feature to make it harder for your system
to serve malicious content to your users.)

See:
http://docs.ckan.org/en/2.7/maintaining/configuration.html#cors-settings

You can explicitly whitelist domains that want to share content from
(preferred, from a security standpoint), but if you really have to frame
in generic content for some reason you can set origin_allow_all.

Regards,
David