From e2aff43926ad68183d5f38e3bb2a5d724814ee02 Mon Sep 17 00:00:00 2001
From: Richard Petersen <richard.petersen@open-xchange.com>
Date: Wed, 2 Mar 2022 11:33:31 +0100
Subject: [PATCH] Fixed: OXUIB-1397 - Parent or opener do not reference opening
window
Root cause: Cross-Origin-Opener-Policy is set to same-origin per default and will prevent parent or window.opener to be set
Solution: Set Cross-Origin-Opener-Policy to same-origin-allow popups
---
src/createApp.js | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/src/createApp.js b/src/createApp.js
index 165eca8..e6dcb38 100644
--- a/src/createApp.js
+++ b/src/createApp.js
@@ -66,7 +66,8 @@ export function createApp () {
app.use(helmet({
contentSecurityPolicy: false,
crossOriginEmbedderPolicy: false,
- originAgentCluster: false
+ originAgentCluster: false,
+ crossOriginOpenerPolicy: { policy: 'same-origin-allow-popups' }
}))
app.use('/healthy', health.LivenessEndpoint(healthCheck))
app.use('/ready', health.ReadinessEndpoint(healthCheck))
--
GitLab