I’ve just started using Directus and created a new CMS template project on Directus Cloud. When using the visual editor I just see a blank screen with the error:
‘This content is blocked. Contact the site owner to fix the issue.’
Same is true if I try to preview any of the pages.
I was able to access the cloud demo project on the Directus website without seeing this error.
Any idea what might be causing this?
Ever find a solution to this?
Did you configure the CSP environment variables to allow your website to be rendered in an iframe? By default Directus is very strict with what’s allowed to be embedded to avoid XSS attacks.
Yeah I realized that because we have an authentication redirect we will need to allow that page to be rendered in an IFRAME as well.
I’m hoping to be able to update the headers to add an exception for just the directus domain using frame-ancestors.