I’m trying to embed a bonita workflow in an iFrame but the server is refusing because X-Frame-Options is set to ‘SAMEORIGIN’.
I’ve developed a custom frontend that incorporates bonita flow in an iframe. They are running on the same host but the port is different (:5000 and :8080).
The X-Frame-Options was not a problem when developing and launching bonita process through bonita studio but, I’m trying now to deploy it in JBoss (I’m using JBoss bundle provided by bonitasoft) and I’m getting this error.
I’ve tried to add the header in JBoss but it only got worst because of a duplicate header and the browser falls back to ‘DENY’.
Can anyone tell me where is this header set and to override / delete it?
Also thought of using nginx to override this request but I don’t know if is possible.
Thank you