Django 3.x X_FRAME_OPTIONS default changed from SAMEORIGIN to DENY breaking Rack SVG #3533

Closed
opened 2025-12-29 18:29:45 +01:00 by adam · 1 comment
Owner

Originally created by @mtinberg on GitHub (Apr 2, 2020).

Environment

  • Python version: 3.6.8
  • NetBox version: develop-2.8

Steps to Reproduce

  1. Install develop-2.8 branch from lae.netbox Ansible playbook in venv with Django 3.x
  2. Navigate to Rack or Rack Elevations display, embedded SVG is retrieved but does not display
  3. TCPDump between HTTPD and uWSGI shows header X-Frame-Options: DENY
  4. This can be fixed by adding X_FRAME_OPTIONS = "SAMEORIGIN" to settings.py

Expected Behavior

Display embedded SVG

Observed Behavior

Empty box where object should be

Fix action

X_FRAME_OPTIONS = "SAMEORIGIN" in settings.py
https://docs.djangoproject.com/en/3.0/ref/settings/#std:setting-X_FRAME_OPTIONS

Originally created by @mtinberg on GitHub (Apr 2, 2020). ### Environment * Python version: 3.6.8 * NetBox version: develop-2.8 ### Steps to Reproduce 1. Install develop-2.8 branch from lae.netbox Ansible playbook in venv with Django 3.x 2. Navigate to Rack or Rack Elevations display, embedded SVG is retrieved but does not display 3. TCPDump between HTTPD and uWSGI shows header X-Frame-Options: DENY 4. This can be fixed by adding X_FRAME_OPTIONS = "SAMEORIGIN" to settings.py ### Expected Behavior Display embedded SVG ### Observed Behavior Empty box where object should be ### Fix action X_FRAME_OPTIONS = "SAMEORIGIN" in settings.py https://docs.djangoproject.com/en/3.0/ref/settings/#std:setting-X_FRAME_OPTIONS
adam closed this issue 2025-12-29 18:29:45 +01:00
Author
Owner

@jeremystretch commented on GitHub (Apr 2, 2020):

We don't track bugs for branches under active development, but I've noticed this behavior and have it on my to-do list.

@jeremystretch commented on GitHub (Apr 2, 2020): We don't track bugs for branches under active development, but I've noticed this behavior and have it on my to-do list.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#3533