Does DX NetOps Portal use iFrames in any capacity?

Products

• DX NetOps
• CA Performance Management - Usage and Administration

Issue/Introduction

Does DX NetOps Portal use iFrames in any capacity?

Environment

Release : 22.2

Resolution

We use X-FRAME-OPTIONS: SAMEORIGIN and Content-Security-Policy that says same src.
We disable loading files from external sites with the default custom headers which customer can change.

Generate URL can generate a URL that can be used in an iframe elsewhere but the custom headers need to be modified to allow it.

The Allow Iframes setting is obsolete.  The Custom Headers is how to configure security headers for all pages.