Merge pull request #2 from OnShift/AV-429-nginx-configuration-modification-for-iframe-support

Av 429 nginx configuration modification for iframe support

Author: Dan Schaefer

.gitignore

@@ -1,3 +1,5 @@
 *~
 *.swp
 *.swo
+*.pem
+

nginx/proxy_ssl.conf

@@ -31,7 +31,7 @@ server {
   resolver_timeout 5s;
 
   add_header Strict-Transport-Security max-age=15638400;
-  add_header X-Frame-Options DENY;
+  add_header X-Frame-Options "{{XFRAME_VALUE}}";
   add_header X-Content-Type-Options nosniff;
 
   location / {

start.sh

@@ -52,5 +52,15 @@ fi
 # Tell nginx the address and port of the service to proxy to
 sed -i "s/{{TARGET_SERVICE}}/${TARGET_SERVICE}/g;" /etc/nginx/conf.d/proxy.conf
 
+# Tell nginx if you want to block or allow iframing of pages and what domain name is allowed to iframe your content
+if [ -n "${XFRAME_OPTION+1}" ]; then
+  echo "Applying iframe option..."
+  sed -i "s/{{XFRAME_VALUE}}/${XFRAME_OPTION}/g;" /etc/nginx/conf.d/proxy.conf
+else
+  echo "Denying iframes..."
+  sed -i "s/{{XFRAME_VALUE}}/DENY/g;" /etc/nginx/conf.d/proxy.conf
+fi
+
+
 echo "Starting nginx..."
 nginx -g 'daemon off;'