https://bpm.tips/tag/headers Powered by Question2Answer https://bpm.tips/3441/how-do-i-secure-coach-views-and-rest-calls-against-a-strict-content-security-policy-and-clickjacking-headers-on-baw Security asked us to add Content-Security-Policy and X-Frame-Options headers on the BAW web tier. After that, coaches with inline scripts broke and the portal iframe stopped rendering. What is compatible with coaches and what needs code changes? https://bpm.tips/3441/how-do-i-secure-coach-views-and-rest-calls-against-a-strict-content-security-policy-and-clickjacking-headers-on-baw Sun, 06 Sep 2026 13:39:49 +0000