# Ignition Perspective Tomcat X-Frame Options

**URL:** <https://forum.inductiveautomation.com/t/ignition-perspective-tomcat-x-frame-options/44524>\
**Category:** Ignition\
**Created:** [March 16, 2021, 1:57pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-tomcat-x-frame-options/44524 "2021-03-16T13:57:02Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![eric.stricklin](https://avatars.discourse-cdn.com/v4/letter/e/ad7895/32.png) [@eric.stricklin](https://forum.inductiveautomation.com/u/eric.stricklin)\
**Post date:** [March 16, 2021, 1:57pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-tomcat-x-frame-options/44524/1 "2021-03-16T13:57:02Z")

</div>

Hey everyone,

I would like to embed some pages from my Perspective project INTO our company website. I’m hoping I can edit web.xml to achieve this. I’ve found a number of web.xml files, and I’m not sure which one to edit.

Here are a couple of such examples:

C:\Program Files\Inductive Automation\Ignition\webserver\webapps\main\WEB-INF

and also

C:\Program Files\Inductive Automation\Ignition\webserver\webapps\commissioning\WEB-INF

Any help would be appreciated, thanks in advance.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [March 16, 2021, 2:00pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-tomcat-x-frame-options/44524/2 "2021-03-16T14:00:01Z")

</div>

I haven’t done this myself, but the proper search term nowadays is [Content Security Policy](http://forum.inductiveautomation.com/search?q=content%20security%20policy).

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [March 16, 2021, 4:10pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-tomcat-x-frame-options/44524/3 "2021-03-16T16:10:54Z")

</div>

Or, even better, the user manual:  
[https://docs.inductiveautomation.com/display/DOC81/Gateway+Configuration+File+Reference#GatewayConfigurationFileReference-XFrameOptions](https://docs.inductiveautomation.com/display/DOC81/Gateway+Configuration+File+Reference#GatewayConfigurationFileReference-XFrameOptions)

---

<div class="post-metadata">

**Author:** ![eric.stricklin](https://avatars.discourse-cdn.com/v4/letter/e/ad7895/32.png) [@eric.stricklin](https://forum.inductiveautomation.com/u/eric.stricklin)\
**Post date:** [March 31, 2021, 1:26pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-tomcat-x-frame-options/44524/4 "2021-03-31T13:26:14Z")

</div>

Thanks for the link. I added these 3 lines under # Additional Java Parameters in the ignition.conf file.

wrapper.java.additional.2=-Dignition.http.session.cookie.same-site.enabled=true  
wrapper.java.additional.3=-Dignition.http.session.cookie.same-site.value=None  
wrapper.java.additional.4=-Dignition.http.header.x\_frame\_options.enabled=false

For anyone else trying to do this, note you will need HTTPS enabled for this to work. Here is a link where you can read why.

[https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite)