yahoo-eng-team team mailing list archive

[Jorge Merlino <2077024@xxxxxxxxxxxxxxxxxx>]

I've managed to reproduce this issue and I found out that it is not a
bug in horizon. It is caused by the web server X-Frame-Options[1] header
setting. Apache sets this as deny by default and the horizon page tries
to access the router page from inside a <svg> tag (that is the network
topology drawing). This <svg> tag counts as an <embed> tag with respect
to the X-Frame-Options setting and thus the browser blocks the request
to delete the router. I was able to fix this issue by changing the
header setting in the apache configuration like this:

Header set X-Frame-Options: "sameorigin"

This allows the page to be opened inside an <svg> tag as long as it
belongs to the same web application (same origin) but would still reject
it in case someone is trying to embed it in an external web site.

[1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-
Options

** Changed in: horizon
     Assignee: (unassigned) => Jorge Merlino (jorge-merlino)

** Changed in: horizon
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/2077024

Title:
  Delete router from Network Topology page throws ns_error_xfo_violation

Status in OpenStack Dashboard (Horizon):
  Invalid

Bug description:
  At the Network Topology page, clicking "Delete router" and then
  "Delete" confirmation modal, nothing happens and I see the following
  error on the browser developer tools:

  ns_error_xfo_violation

  
  Steps to reproduce
  1. Network -> Router -> Create Router 
  2. Routers -> Click on recently created router -> Interfaces tab -> + Add Interface -> Select one of the Subnets drop down options available -> Press "Submit" 
  3. Network Topology -> Select the Router created -> Delete router -> Confirmation Delete Router pop-up window -> "Delete router"

  Issue Detected: Action on Delete Router is not performed by the GUI as
  expected.

  Expected Result: Delete Router action is performed and the Router is
  deleted via this available GUI option.

  
  Deleting the router through Router -> Delete router, does works. 

  Ubuntu 22.04.4 LTS (Jammy Jellyfish)
  openstack-dashboard 4:22.1.1-0ubuntu1.1

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/2077024/+subscriptions