Nextcloud/ CODE connection Refused to frame 'https://xxxxxx. because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self'"

Hello everyone. I have recently had problems displaying documents with collabora CODE. My config has been working for several months without any particular difficulty. but now it doesn’t work anymore. After reading the collabora logs and the web browser console I got an error "Refused to frame ‘https://collabora.xxxxxx.duckdns.org/’ because an ancestor violates the following Content Security Policy directive: “frame-ancestors ‘self’”.
However, I didn’t change anything in my coolwsd.xml. I have between the <frame_ancestors>https://*</frame_ancestors> tags. but it seems to be obsolete?
I don’t understand where to indicate the CSP? In the reverse proxy config, in ssl.conf, ??
I need help to resolve this problem which is beyond my control. Thank you in advance for any help you can give me.

Hello, so I found the place to solve my problem. In the nextcloud ssl.conf file I commented out the add hearder CSP line and that fixed my problem. But it’s not the safest option. If anyone can point me to good practice, I would appreciate it in advance.

as much as I cherish your solution that you found as much I need to tell you that we don’t know nothing about your setup.

Which means:

  • you prolly won’t get the help you would need
  • anyone else can’t really relate to your problem even if the had a similar one (which might be caused by the same thing - but you never know)

so please… it would be nice if you could add more infos about your setup, server, server environment etc. and please do that from the beginning on next time. Thank you