How to specify frame_options in shiny-server.conf?

[Alexander Poon]

I'm running Shiny Server Open Source on Ubuntu 16.10. My organization's IT department tells me I need to set X-Frame-Options, so following the docs (http://docs.rstudio.com/shiny-server/#frame_options) I edited /etc/shiny-server/shiny-server.conf as follows:

# Instruct Shiny Server to run applications as the user "shiny"

run_as shiny;

# Set x-frame-options

frame_options deny;

# Define a server that listens on port 3838

server {

  listen 3838;

  # Define a location at the base URL

  location / {

    # Host the directory of Shiny Apps stored in this directory

    site_dir /srv/shiny-server;

    # Log all Shiny output to files in this directory

    log_dir /var/log/shiny-server;

    # When a user visits the base URL rather than a particular application,

    # an index of the applications available in this directory will be shown.

    directory_index on;

  }

}

After editing shiny-server.conf I ran sudo systemctl kill -s HUP -kill-who=main shiny-server.

However, when I pull up Developer Tools on my Shiny app, I don't see X-Frame-Options: deny under Response Headers. Is this what I should be looking at to see that I did it right?

I also tried putting frame_options under server and got the same (lack of) result.

[Joe Cheng]

Yep, that should work. Can you check your /var/log/shiny-server.log to confirm that the config was actually reloaded? It's possible systemctl doesn't actually know the pid of our main process. I usually do sudo pkill -SIGHUP shiny-server instead.

--
You received this message because you are subscribed to the Google Groups "Shiny - Web Framework for R" group.
To unsubscribe from this group and stop receiving emails from it, send an email to shiny-discus...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/shiny-discuss/94b30451-3654-4d4b-8174-7f127e0cc884%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Alexander Poon]

/var/log/shiny-server.log shows

[ERROR] shiny-server - Error loading config: Unknown directive "frame_options" (/etc/shiny-server/shiny-server.conf:5:1)

I ran sudo pkill -SIGHUP shiny-server as well but in checking the shiny-server.log file afterward, it shows the same error.

[Joe Cheng]

Oh, I didn't realize you were on the open source version. I think frame_options is currently only recognized in Shiny Server Pro. I'll backport it to Shiny Server Open Source for the next release. If you're on a deadline, let me know.

To view this discussion on the web visit https://groups.google.com/d/msgid/shiny-discuss/34e92169-3c42-43bd-b8ee-08e0abd3ff75%40googlegroups.com.

[Alexander Poon]

Understood. Thanks very much!

[Raj Patrao]

Hi Joe, is this change done yet ? when can we expect a patch for this and how can we pull it into RStudio env ? 

[jiger...@ascentius.com]

Hi,

Can you please suggest an alternative for disabling the x-frames in shiny open version until the same functionality is rolled out for Shiny Open source?

Regards,

Jiger

On Thursday, April 27, 2017 at 2:11:54 AM UTC+5:30, Joe Cheng [RStudio] wrote:

[Joe Cheng [RStudio]]

The new version is coming very soon--hopefully this week.

[Karthik Raja]

Was the new version released to enable the embed options of open source Shiny page?

regards

[Joe Cheng]

Yes, any version of SSOS >= 1.5.4 should have it.

--
You received this message because you are subscribed to the Google Groups "Shiny - Web Framework for R" group.
To unsubscribe from this group and stop receiving emails from it, send an email to shiny-discus...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/shiny-discuss/c5ac1f74-90e4-49bc-b2b3-55c85bc11546%40googlegroups.com.