JangoSteve/remotipart

Load denied by X-Frame-Options

Opened this issue · 1 comments

Hello!

I'm using remotipart to upload pictures in a model dialog that results in an ajax request. In development mode everything works fine, but when I run the application in production mode I always get:

Load denied by X-Frame-Options: https://sub.domain/path/to/controller does not permit framing.
Error: Permission denied to access property "document"

The application uses a subdomain and HTTPS. Can any of this be related? Also: the pictures I upload actually get uploaded, but the JavaScript that gets returned is not executed due to the thrown error.

Any help is greatly appreciated!

I ran into this a while back and solved it by changing my X-Frame-Options header to allow the upload: #132