diff --git a/go_cloud/internal/http/wopi_handlers.go b/go_cloud/internal/http/wopi_handlers.go index 92d0635..b90c9b2 100644 --- a/go_cloud/internal/http/wopi_handlers.go +++ b/go_cloud/internal/http/wopi_handlers.go @@ -666,7 +666,8 @@ func collaboraProxyHandler(w http.ResponseWriter, r *http.Request, db *database. wopiSrc := fmt.Sprintf("https://go.b0esche.cloud/wopi/files/%s?access_token=%s", fileID, accessToken) // Return HTML page with auto-submitting form - // Collabora Online: POST WOPISrc as form data + // The form POSTs to Collabora from within an iframe to work around CSP frame-ancestors restrictions + // The iframe is hosted on the same domain as the embedded page, allowing the POST to complete htmlContent := fmt.Sprintf(`
@@ -683,22 +684,18 @@ func collaboraProxyHandler(w http.ResponseWriter, r *http.Request, db *database.Loading Collabora Online...