Add X-Frame-Options customizability #1425

New Issue

MrUnknownDE · 2026-04-06T01:53:12+02:00

MrUnknownDE commented

2026-04-06 01:53:12 +02:00

Originally created by @styris-ame on 9/28/2023

Since the closure of issue 44, it is not possible to embed vaultwarden as an iFrame on webapps like Homarr or organizr.

Adding an option to allow a specific website(s) to use iFrames would resolve this issue. Something like this should work:
res.set_raw_header("X-Frame-Options", "ALLOW-FROM <WEBSITE>");
An example for <WEBSITE> might be: https://homarr.my-domain.com

Perhaps a docker environment variable could be used to specify this.

*Originally created by @styris-ame on 9/28/2023* Since the closure of [issue 44](https://github.com/dani-garcia/vaultwarden/issues/44), it is not possible to embed vaultwarden as an iFrame on webapps like Homarr or organizr. Adding an option to allow a specific website(s) to use iFrames would resolve this issue. Something like this should work: `res.set_raw_header("X-Frame-Options", "ALLOW-FROM <WEBSITE>");` An example for `<WEBSITE>` might be: `https://homarr.my-domain.com` Perhaps a docker environment variable could be used to specify this.

MrUnknownDE closed this issue

2026-04-06 01:53:12 +02:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#1425