# From version 24.12.4.1 onwards CSP directives in coolwsd.xml are being ignored **URL:** \ **Category:** Installation & Configuration\ **Created:** [April 2, 2025, 10:46pm UTC](https://forum.collaboraonline.com/t/from-version-24-12-4-1-onwards-csp-directives-in-coolwsd-xml-are-being-ignored/3567 "2025-04-02T22:46:47Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![PaddyTB](https://avatars.discourse-cdn.com/v4/letter/p/65b543/32.png) [@PaddyTB](https://forum.collaboraonline.com/u/PaddyTB)\ **Post date:** [April 2, 2025, 10:46pm UTC](https://forum.collaboraonline.com/t/from-version-24-12-4-1-onwards-csp-directives-in-coolwsd-xml-are-being-ignored/3567/1 "2025-04-02T22:46:47Z")
When upgrading the CODE docker image in our system from version `24.04.12.3.1` to `24.04.12.4.1` (and any of the subsequent versions), the response header returned from the `/browser/30822a710f/cool.html` endpoint no longer includes the extra `frame-ancestors` values as supplied in **coolwsd.xml** ’s `` element. This throws the following browser error and stops the iframe from loading Collabora : `Refused to frame 'https://' because an ancestor violates the following Content Security Policy directive: "frame-ancestors :* :*"` This header value when returned from `24.04.12.3.1` and earlier versions has all the additional values prepended to the header before the two default ones allowing the iframe to load Collabora. Is this a known issue? I can’t find anything from scouring this forum or the web. Any help appreciated. Thanks! ---
**Author:** ![darshan](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/darshan/32/2230_2.png) [@darshan](https://forum.collaboraonline.com/u/darshan)\ **Post date:** [April 3, 2025, 8:09am UTC](https://forum.collaboraonline.com/t/from-version-24-12-4-1-onwards-csp-directives-in-coolwsd-xml-are-being-ignored/3567/2 "2025-04-03T08:09:42Z")
Hii @PaddyTB Let me check the commit details between this 2 version. It maybe it was an intentional change to fix something. Thanks Darshan ---
**Author:** ![PaddyTB](https://avatars.discourse-cdn.com/v4/letter/p/65b543/32.png) [@PaddyTB](https://forum.collaboraonline.com/u/PaddyTB)\ **Post date:** [April 3, 2025, 12:30pm UTC](https://forum.collaboraonline.com/t/from-version-24-12-4-1-onwards-csp-directives-in-coolwsd-xml-are-being-ignored/3567/3 "2025-04-03T12:30:46Z")
Thanks @darshan - fingers crossed its something obvious. ---
**Author:** ![darshan](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/darshan/32/2230_2.png) [@darshan](https://forum.collaboraonline.com/u/darshan)\ **Post date:** [April 3, 2025, 12:41pm UTC](https://forum.collaboraonline.com/t/from-version-24-12-4-1-onwards-csp-directives-in-coolwsd-xml-are-being-ignored/3567/4 "2025-04-03T12:41:57Z")
Just want to say that, You’re welcome to join the community meeting to share your thoughts, ideas, or get involved in Collabora Online—it’s a public meeting. We hold it every Thursday, and we also have TTT (Tea Time Training) every Friday to educate and explore more topics on Collabora Online. > **[Communicate](https://collaboraonline.github.io/post/communicate/)** > > Do you want to get involved in localization? Cheers Darshan ---
**Author:** ![PaddyTB](https://avatars.discourse-cdn.com/v4/letter/p/65b543/32.png) [@PaddyTB](https://forum.collaboraonline.com/u/PaddyTB)\ **Post date:** [April 4, 2025, 9:06am UTC](https://forum.collaboraonline.com/t/from-version-24-12-4-1-onwards-csp-directives-in-coolwsd-xml-are-being-ignored/3567/5 "2025-04-04T09:06:32Z")
Thanks @darshan I’ll try to call in 🙂 Did you have any joy looking at the commits? Should I log this formally as a bug? Seems too big of an issue for it not to have affected anyone else… ---
**Author:** ![PaddyTB](https://avatars.discourse-cdn.com/v4/letter/p/65b543/32.png) [@PaddyTB](https://forum.collaboraonline.com/u/PaddyTB)\ **Post date:** [April 8, 2025, 11:08am UTC](https://forum.collaboraonline.com/t/from-version-24-12-4-1-onwards-csp-directives-in-coolwsd-xml-are-being-ignored/3567/6 "2025-04-08T11:08:56Z")
> Let me check the commit details between this 2 version. It maybe it was an intentional change to fix something. Hi @darshan sorry to chase this - did you find anything? Should I go ahead and log this as a bug? ---
**Author:** ![darshan](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/darshan/32/2230_2.png) [@darshan](https://forum.collaboraonline.com/u/darshan)\ **Post date:** [April 8, 2025, 11:21am UTC](https://forum.collaboraonline.com/t/from-version-24-12-4-1-onwards-csp-directives-in-coolwsd-xml-are-being-ignored/3567/7 "2025-04-08T11:21:21Z")
hii @PaddyTB I have busy with some other development stuff. Sorry i haven’t got time to look this issue. > [@PaddyTB](#): > > Should I go ahead and log this as a bug? Yes please feel free to report it. As soon as i got time i will jump on to this issue… Once again sorry Thanks Darshan ---
**Author:** ![PaddyTB](https://avatars.discourse-cdn.com/v4/letter/p/65b543/32.png) [@PaddyTB](https://forum.collaboraonline.com/u/PaddyTB)\ **Post date:** [April 8, 2025, 11:25am UTC](https://forum.collaboraonline.com/t/from-version-24-12-4-1-onwards-csp-directives-in-coolwsd-xml-are-being-ignored/3567/8 "2025-04-08T11:25:46Z")
Hi @darshan no worries and thanks for responding - I see you are very busy! ---
**Author:** ![PaddyTB](https://avatars.discourse-cdn.com/v4/letter/p/65b543/32.png) [@PaddyTB](https://forum.collaboraonline.com/u/PaddyTB)\ **Post date:** [April 8, 2025, 11:57am UTC](https://forum.collaboraonline.com/t/from-version-24-12-4-1-onwards-csp-directives-in-coolwsd-xml-are-being-ignored/3567/9 "2025-04-08T11:57:54Z")
Hi @darshan, I’ve added this bug: [CSP directives in coolwsd.xml are being ignored from CODE v24.12.4.1 onwards · Issue #11573 · CollaboraOnline/online · GitHub](https://github.com/CollaboraOnline/online/issues/11573) Let me know if it needs any more info. Thanks, Paddy ---
**Author:** ![darshan](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/darshan/32/2230_2.png) [@darshan](https://forum.collaboraonline.com/u/darshan)\ **Post date:** [April 10, 2025, 9:48am UTC](https://forum.collaboraonline.com/t/from-version-24-12-4-1-onwards-csp-directives-in-coolwsd-xml-are-being-ignored/3567/10 "2025-04-10T09:48:52Z")
> > > This in addition to the deprecated 'net.frame\_ancestors' > Add a new ContentSecur…ityPolicy constructor from string. > Add a new ContentSecurityPolicy::merge() from a ContentSecurityPolicy > > > Change-Id: I89c02d820bd4d4bfc6ae7de6ebf75970997822c2 > > > \* Resolves: # > \* Target version: master > > \### Summary > > > \### TODO > > \- \[\] ... > > \### Checklist > > \- \[x\] I have run \`make prettier-write\` and formatted the code. > \- \[x\] All commits have Change-Id > \- \[x\] I have run tests with \`make check\` > \- \[x\] I have issued \`make run\` and manually verified that everything looks okay > \- \[\] Documentation (manuals or wiki) has been updated or is not required ---
**Author:** ![darshan](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/darshan/32/2230_2.png) [@darshan](https://forum.collaboraonline.com/u/darshan)\ **Post date:** [April 10, 2025, 9:48am UTC](https://forum.collaboraonline.com/t/from-version-24-12-4-1-onwards-csp-directives-in-coolwsd-xml-are-being-ignored/3567/11 "2025-04-10T09:48:56Z")
Closed on April 10, 2025, 9:48am UTC