X-Frame-Options is DENY for http://localhost:8080/spoon/kettle/status

[guo1017138]

Checklist before submitting an issue

• [Not usre] This issue does not happen on Spoon.
  If your issue happens on Spoon too, it originates from Spoon (not from webSpoon). Please look at Pentaho Community Forums, or seek help at Hitachi Vantara Community, or submit an issue at Pentaho JIRA).
• [Yes ] I searched for existing issues at here and there.

Expected Behavior

X-Frame-Options should be SAMEORIGIN due to I set it in webapps/spoon/WEB-INF/spring/security.xml as the following:

  <http>
    <intercept-url pattern="/favicon.ico" access="permitAll"/>
    <intercept-url pattern="/rwt-resources/**" access="permitAll"/>
    <intercept-url pattern="/**" access="hasRole('USER')" />
    <form-login default-target-url="/spoon"/>
    <logout />
    <!-- Spring Security's CSRF protection is disabled because RAP/RWT does not handle the CSRF token issued by Spring Security.
         RAP/RWT has its own CSRF protection. See https://bugs.eclipse.org/bugs/show_bug.cgi?id=413668 for more details -->
    <csrf disabled="true"/>
    <headers>
      <frame-options policy="SAMEORIGIN"/>
    </headers>
  </http>

Actual Behavior

Screenshots and error messages are helpful.

Steps to Reproduce the Problem

1. bring up webspoon with docker
2. run some job with carte
3. check carte job status with http://localhost:8080/spoon/kettle/status URL, select one job, view job details.
4. In the jobstatus page, the canvas preview can't be display due to X-Frame-OPTIONS is DENY

Specifications

Server

If deployed as a Docker container

• Docker tag (e.g., hiromuhota/webspoon:0.9.0.21):
  hiromuhota/webspoon:latest

Else

• OS (e.g., Mac OS X 10.12.6):
• Java (e.g., Oracle JDK 8u151):
• Servlet container (e.g., Apache Tomcat 8.5.20):
• webSpoon (e.g., version: 0.8.0.13 or commitId: 0211d84):

Client

• OS (e.g., Mac OS X 10.12.6):
• Browser (e.g., Google Chrome 64.0.3282.140):

[gaoconggit]

+1

[gaoconggit]

i resovled by

[gaoconggit]

but, i get this . chinese garbled characters .