Hi, we are using jira in our server. In our application we want to show the jira board in iframe so in order to test that i have installed jira as a service in my machine and while running it in iframe it was not working and we found the following link which can disable cross-origin policy by disabling clickjacing. https://confluence.atlassian.com/jirakb/security-headers-in-jira-939919914.html
by using regedit method i have added the -Dcom.atlassian.jira.clickjacking.protection.disabled=true and the screen is loading in iframe and for Dashboard.jspa file the cross-origin/same-origin header is not coming but showing error on console
SecurityError: Permission denied to access property "ApplinksUtils" on cross-origin object batch.js:40
a http://localhost:8080/s/d85661503a735cb843ec0a8a6f8a7998-CDN/-4zvk7/803001/6411e0087192541a09d88223fb51a6a0/87239ac55e56fbd10f0ec7f7b702896d/_/download/contextbatch/js/com.atlassian.jira.plugins.jira-development-integration-plugin:0,-_super,-atl.dashboard,-jira.global,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&locale=en-US:40
c http://localhost:8080/s/cb904a6bcd119d8dcf286c684d7672a5-CDN/-4zvk7/803001/6411e0087192541a09d88223fb51a6a0/c80f886dab44f2a2808c31a468cf2db2/_/download/contextbatch/js/_super/batch.js?locale=en-US:44
add http://localhost:8080/s/cb904a6bcd119d8dcf286c684d7672a5-CDN/-4zvk7/803001/6411e0087192541a09d88223fb51a6a0/c80f886dab44f2a2808c31a468cf2db2/_/download/contextbatch/js/_super/batch.js?locale=en-US:44
ready http://localhost:8080/s/cb904a6bcd119d8dcf286c684d7672a5-CDN/-4zvk7/803001/6411e0087192541a09d88223fb51a6a0/c80f886dab44f2a2808c31a468cf2db2/_/download/contextbatch/js/_super/batch.js?locale=en-US:44
init http://localhost:8080/s/cb904a6bcd119d8dcf286c684d7672a5-CDN/-4zvk7/803001/6411e0087192541a09d88223fb51a6a0/c80f886dab44f2a2808c31a468cf2db2/_/download/contextbatch/js/_super/batch.js?locale=en-US:44
init http://localhost:8080/s/cb904a6bcd119d8dcf286c684d7672a5-CDN/-4zvk7/803001/6411e0087192541a09d88223fb51a6a0/c80f886dab44f2a2808c31a468cf2db2/_/download/contextbatch/js/_super/batch.js?locale=en-US:62
E http://localhost:8080/s/cb904a6bcd119d8dcf286c684d7672a5-CDN/-4zvk7/803001/6411e0087192541a09d88223fb51a6a0/c80f886dab44f2a2808c31a468cf2db2/_/download/contextbatch/js/_super/batch.js?locale=en-US:29
ApplinksUtils http://localhost:8080/s/d85661503a735cb843ec0a8a6f8a7998-CDN/-4zvk7/803001/6411e0087192541a09d88223fb51a6a0/87239ac55e56fbd10f0ec7f7b702896d/_/download/contextbatch/js/com.atlassian.jira.plugins.jira-development-integration-plugin:0,-_super,-atl.dashboard,-jira.global,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&locale=en-US:40
<anonymous> http://localhost:8080/s/d85661503a735cb843ec0a8a6f8a7998-CDN/-4zvk7/803001/6411e0087192541a09d88223fb51a6a0/87239ac55e56fbd10f0ec7f7b702896d/_/download/contextbatch/js/com.atlassian.jira.plugins.jira-development-integration-plugin:0,-_super,-atl.dashboard,-jira.global,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&locale=en-US:40
we have written javascript where we have jira running in an iframe to hide the header and footer. which is also not working.
As we have disabled the clicking projection disabled it why it shows the same-origin header for batch.js file?
can some help us how to resolve this issue ASAP.
Thanks
Abinandan