Skip to content

Fix X-Frame enabled behaviour - #23222

Merged
potiuk merged 1 commit into
apache:mainfrom
potiuk:fix-xframe-behaviour
Apr 25, 2022
Merged

potiuk merged 1 commit into
apache:mainfrom
potiuk:fix-xframe-behaviour

Conversation

@potiuk

@potiuk potiuk commented Apr 25, 2022

Copy link
Copy Markdown
Member

The #19491 incorrectly changed condition on assigning the
X-Frame-Options header DENY. It actually was not possible to set
the DENY header.


^ Add meaningful description above

Read the Pull Request Guidelines for more information.
In case of fundamental code change, Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in a newsfragement file, named {pr_number}.significant.rst, in newsfragments.

@boring-cyborg boring-cyborg Bot added the area:webserver Webserver related Issues label Apr 25, 2022
@potiuk
potiuk requested a review from jedcunningham April 25, 2022 14:41
@potiuk potiuk added this to the Airflow 2.3.0 milestone Apr 25, 2022
@potiuk

potiuk commented Apr 25, 2022

Copy link
Copy Markdown
Member Author

I think (unless i got it somehow wrong) this one shoudl go to 2.3.0 (see #19491 (comment))

@potiuk
potiuk requested a review from uranusjr April 25, 2022 14:43
@potiuk

potiuk commented Apr 25, 2022

Copy link
Copy Markdown
Member Author

@uranusjr - we both approved the change in #19491 but I think we were both wrong as we have not looked beyond just the diff :) (and it did not work before either actually)

Comment thread airflow/www/extensions/init_security.py Outdated
@potiuk
potiuk force-pushed the fix-xframe-behaviour branch from 195646e to 45434d5 Compare April 25, 2022 20:02
The apache#19491 incorrectly changed condition on assigning the
X-Frame-Options header DENY. It actually was not possible to set
the DENY header.
@potiuk
potiuk force-pushed the fix-xframe-behaviour branch from 45434d5 to ad61eb0 Compare April 25, 2022 20:04
@github-actions github-actions Bot added the okay to merge It's ok to merge this PR as it does not require more tests label Apr 25, 2022
@github-actions

Copy link
Copy Markdown
Contributor

The PR is likely OK to be merged with just subset of tests for default Python and Database versions without running the full matrix of tests, because it does not modify the core of Airflow. If the committers decide that the full tests matrix is needed, they will add the label 'full tests needed'. Then you should rebase to the latest main or amend the last commit of the PR, and push it with --force-with-lease.

@potiuk
potiuk merged commit ed6dadc into apache:main Apr 25, 2022
@potiuk
potiuk deleted the fix-xframe-behaviour branch April 25, 2022 20:53
@ephraimbuddy ephraimbuddy added the type:bug-fix Changelog: Bug Fixes label Apr 26, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:webserver Webserver related Issues okay to merge It's ok to merge this PR as it does not require more tests type:bug-fix Changelog: Bug Fixes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants