[Tomcat] it set 'X-Frame-Options' to 'deny'. 오류 해결법

네이버의 WYSIWYG에디터인 SmartEditor2를 적용 중 발생한 오류와 해결법입니다.

 

오류 상황

Refused to display 'http://localhost/editor/smartEditor2/SmartEditor2Skin.html' in a frame because it set 'X-Frame-Options' to 'deny'.
Uncaught DOMException: Blocked a frame with origin "http://localhost:8080" from accessing a cross-origin frame. at HTMLIFrameElement.<anonymous> (http://localhost/editor/smartEditor2/js/HuskyEZCreator.js:65:37)

사이트에 iframe이 삽입이 불가능하다는 오류입니다.

 

해결 방법 1

<!-- 기존 -->
<filter>
	<filter-name>httpHeaderSecurity</filter-name>
	<filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
	<async-supported>true</async-supported>
</filter>

<!-- 수정 -->
<filter>
	<filter-name>httpHeaderSecurity</filter-name>
	<filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
	<init-param>
		<param-name>antiClickJackingOption</param-name>
		<param-value>SAMEORIGIN</param-value>
	</init-param>
</filter>

<!-- 기존 -->
<filter-mapping>
	<filter-name>httpHeaderSecurity</filter-name>
	<url-pattern>/*</url-pattern>
	<dispatcher>REQUEST</dispatcher>
</filter-mapping>

<!-- 수정 -->
<filter-mapping>
	<filter-name>httpHeaderSecurity</filter-name>
	<url-pattern>/*</url-pattern>
</filter-mapping>

톰켓 설정 파일인 web.xml에서 위와 같이 설정을 수정해 주시면 됩니다.

 

해결 방법 2

<!--
  <filter>
    <filter-name>httpHeaderSecurity</filter-name>
    <filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
    <async-supported>true</async-supported>
  </filter>
-->

<!--
  <filter-mapping>
    <filter-name>httpHeaderSecurity</filter-name>
    <url-pattern>/*</url-pattern>
    <dispatcher>REQUEST</dispatcher>
  </filter-mapping>
-->

개발 환경이라면 위와 같이 주석 처리하셔도 무관합니다.