Add X-Frame-Options customizability #1717

New Issue

OVERLORD · 2026-02-05T01:34:43+03:00

OVERLORD commented

2026-02-05 01:34:43 +03:00

Originally created by @styris-ame on GitHub (Sep 28, 2023).

Since the closure of issue 44, it is not possible to embed vaultwarden as an iFrame on webapps like Homarr or organizr.

Adding an option to allow a specific website(s) to use iFrames would resolve this issue. Something like this should work:
res.set_raw_header("X-Frame-Options", "ALLOW-FROM <WEBSITE>");
An example for <WEBSITE> might be: https://homarr.my-domain.com

Perhaps a docker environment variable could be used to specify this.

Originally created by @styris-ame on GitHub (Sep 28, 2023). Since the closure of [issue 44](https://github.com/dani-garcia/vaultwarden/issues/44), it is not possible to embed vaultwarden as an iFrame on webapps like Homarr or organizr. Adding an option to allow a specific website(s) to use iFrames would resolve this issue. Something like this should work: `res.set_raw_header("X-Frame-Options", "ALLOW-FROM <WEBSITE>");` An example for `<WEBSITE>` might be: `https://homarr.my-domain.com` Perhaps a docker environment variable could be used to specify this.

OVERLORD closed this issue

2026-02-05 01:34:44 +03:00

OVERLORD commented

2026-02-05 01:34:47 +03:00

@styris-ame commented on GitHub (Sep 28, 2023):

Closed in favor of a proper feature request: https://github.com/dani-garcia/vaultwarden/discussions/3929

@styris-ame commented on GitHub (Sep 28, 2023): Closed in favor of a proper feature request: https://github.com/dani-garcia/vaultwarden/discussions/3929

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/vaultwarden#1717