On Smartedit, home page for none of the sites are loading.

[former_member912998]

My Hybris version is 2011.13.

I have installed smartedit addon, and included all the extensions given in the SAP wiki pages.

I am able to open smartedit, login using admin account but when I click on any site's homepage it doesn't load anything.

No error on any of the API call either.

[adambadura]

Are there any errors in the browser's dev tools console?

[former_member912998]

Hi Adam, this is the error i am getting in console

Refused to display 'https://localhost:9002/' in a frame because it set 'X-Frame-Options' to 'deny'.

[adambadura]

It seems that you need to configure X-Frame-Options and CSP for the storefront:

X-Frame-Options: SAMEORIGIN

Content-Security-Policy: frame-ancestors 'self' <smartedit host>;

In classic JSP storefront this could be done using XSSFilter: https://help.sap.com/docs/SAP_COMMERCE_CLOUD_PUBLIC_CLOUD/aa417173fe4a4ba5a473c93eb730a417/84536f347...

In case of Spartacus you need to configure the webserver that serves the storefront application.

[akasjfljaskl934]

I can already see the property "xss.filter.header.X-Frame-Options=SAMEORIGIN" in platform/project.properties.

Is there anything else I need to do?

From the SAP help link it seems just adding this property should be enough.

I also added smartedit.xss.filter.header.X-Frame-Options=SAMEORIGIN via HAC, but no help.