add frame ancestors description for iframe setup
This commit is contained in:
@ -50,6 +50,14 @@ All data used by CodeOcean is stored in a Postgres database which is mounted
|
||||
- `server.address` to `0.0.0.0`
|
||||
- `nomad.address` to `host.docker.internal`
|
||||
|
||||
For embedding and Usage of CodeOcean as LTI Integration in edX you have to configure the Content Security Policy in the `codeocean/config/initializers/content_security_policy.rb` file. The following lines have to be added:
|
||||
```
|
||||
policy.frame_ancestors :self, 'https://*.htwk-leipzig.de'
|
||||
```
|
||||
|
||||
You can define the allowed domains for embedding CodeOcean in other websites. The `:self` option allows embedding in the same domain. The `*.htwk-leipzig.de` option allows embedding in all subdomains of htwk-leipzig.de. This step has to be done before building the Docker containers.
|
||||
|
||||
|
||||
The rest seems to be left unchanged...
|
||||
|
||||
==== Checking access to CodeOcean ====
|
||||
|
Reference in New Issue
Block a user