Fix preview warning page when inside iframe (#2373)

Signed-off-by: Bruno Grbavac <[email protected]>

Author: brunogrbavac

apps/proxy/pkg/proxy/proxy.go

@@ -123,7 +123,7 @@ func StartProxy(config *config.Config) error {
 
 	router.Any("/*path", func(ctx *gin.Context) {
 		if ctx.Request.Method == "POST" && ctx.Request.URL.Path == ACCEPT_PREVIEW_PAGE_WARNING_PATH {
-			handleAcceptProxyWarning(ctx, config.EnableTLS)
+			handleAcceptProxyWarning(ctx, config.ProxyProtocol == "https")
 			return
 		}
 

apps/proxy/pkg/proxy/warning_page.go

@@ -22,6 +22,15 @@ const (
 )
 
 func handleAcceptProxyWarning(ctx *gin.Context, secure bool) {
+	// Set SameSite attribute based on security context
+	if secure {
+		// For HTTPS, use SameSite=None to allow cross-origin iframe usage
+		ctx.SetSameSite(http.SameSiteNoneMode)
+	} else {
+		// For HTTP (local dev), use SameSite=Lax
+		ctx.SetSameSite(http.SameSiteLaxMode)
+	}
+
 	// Set the acceptance cookie
 	ctx.SetCookie(
 		PREVIEW_PAGE_ACCEPT_COOKIE_NAME,