sarex/iac
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

++ fix wb superset iframe headers

Browse Source
This commit is contained in:
Kochetkov S 2026-08-17 18:12:12 +03:00
parent 79cb9d3d42
commit 1ccb177d3c
1 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
clusters/wb/infrastructure/patches/superset.yaml
View File

@ -78,9 +78,25 @@ spec:
GUEST_TOKEN_JWT_SECRET = os.getenv("JWT_SECRET")
GUEST_TOKEN_JWT_EXP_SECONDS = 3600
iframe_config: |
TALISMAN_ENABLED = True
TALISMAN_CONFIG = {
"frame_options": None,
"content_security_policy": {
"base-uri": ["'self'"],
"default-src": ["'self'"],
"img-src": ["'self'", "blob:", "data:", "https://apachesuperset.gateway.scarf.sh", "https://static.scarf.sh/"],
"worker-src": ["'self'", "blob:"],
"connect-src": ["'self'", "https://api.mapbox.com", "https://events.mapbox.com"],
"object-src": ["'none'"],
"style-src": ["'self'", "'unsafe-inline'"],
"script-src": ["'self'", "'strict-dynamic'"],
"frame-ancestors": ["'self'", "https://srx.wb.ru", "https://*.wb.ru"],
},
"content_security_policy_nonce_in": ["script-src"],
}
X_FRAME_OPTIONS = None
HTTP_HEADERS = {
"Content-Security-Policy": "frame-ancestors https://*.wb.ru",
"Content-Security-Policy": "frame-ancestors 'self' https://srx.wb.ru https://*.wb.ru",
}
extend_timeout: |
SQLLAB_ASYNC_TIME_LIMIT_SEC = 300