Forge tunnel requests for Custom UI fail due to CSP frame-ancestors violation

Forge Forge UI Kit and Custom UI
, ,
1

I have developed Forge apps before, but now, when creating a blank new Jira Custom UI app (global page module) and using forge tunnel, requests from the client fail with the error:

  • Refused to frame ‘http://localhost:8000/’ because an ancestor violates the following Content Security Policy directive: “frame-ancestors ‘self’ *.atlassian.net bitbucket.org *.jira.com *.atlassian.com”. (Client console)
  • CSP violation detected for ‘frame-ancestors’ while serving content at http://localhost:8000/ (Tunnel / ngrok console)

I am using node 18.18.2 and forge-cli 7.0.4.; ngrok credentials are in place and correctly added to the forge settings. The behavior is the same with Docker and without (native Node.js runtime).

Thanks for your support!

1 Like
2

Turned out the problem was due to having a custom domain activated on my developer instance. Deactivating the domain made it go away… :roll_eyes:

3 Likes