I have a local dev environment with

• apache superset 4.0.2 – docker compose image
• ionic v7 angular v18 app
• Chrome 127 with “–disable-web-security” flag

Apache Superset is running and accessible through: http://localhost:8088

I’m trying to embed the superset instance in my ionic application with the following config:

<ion-content>
  <iframe src="https://enma-superset:8088" width="100%" height="100%" frameborder="0"></iframe>
</ion-content>

The app starts fine but the embedded frame shows the following error: “localhost refused the connection.” In the developer console I reveive this: “Refused to display ‘http://localhost:8088/’ in a frame because it set ‘X-Frame-Options’ to ‘sameorigin’.”

How to resolve this issue?

Chrome 127 with “–disable-web-security” flag
Apache Superset config:
# CORS Options
ENABLE_CORS = False
CORS_OPTIONS: dict[Any, Any] = {}