https://csp-guide.com/tags/apache-superset/ Recent content in Apache-Superset on CSP Guide Hugo -- gohugo.io en-us Sat, 29 Aug 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-apache-superset-embeds/ Sat, 29 Aug 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-apache-superset-embeds/ <p>Embedding Apache Superset sounds simple: generate an iframe, allow the host app, ship it. Then CSP shows up and quietly wrecks the whole thing.</p> <p>I’ve seen teams lose hours on this because the browser error messages are half-useful and Superset embeds have a few moving parts: iframe loading, API calls, auth endpoints, static assets, and whatever sits in front of Superset like Nginx, Apache, or a cloud proxy. One wrong directive and the embed either goes blank or fails in weird ways after login.</p>