Unable to Load iframes After 11.0.4 Patch/Upgrade

Question

After I upgraded Sugar Enterprise to 
 11.0.4, I was no longer able to load Sugar into an iframe. I tried to update the CSP settings via the Admin Panel, but the problem still persists. iFrames do not load even when I explicitly list the url that will be loaded the iframe. I also tried to throw a wildcard there to allow all sites, to no avail. Any help is greatly appreciated

Matthew Irving · Answer

Hi Matthew Irving , 
 Perhaps you are inputting the wrong values in your CSP configurations, you can review them here . 
 In the C ontent Security Policy Settings screen, enter in frame-ancestors your "iframe system's URL", allowing Sugar to be displayed in that iframe domain. 
 For example: 
 
 iFrame URL: https://my-legacy-system.mycompany.com 
 Sugar Instance URL: https://sugar-instance.mycompany.com 
 Trusted Parent Domains ('frame-ancestors'): https://my-legacy-system.mycompany.com or https://*.mycompany.com 
 
 That should allow you to embed sugar in the parent domain.

Matthew Irving · Answer

ok, I see, applogies for that.. 11.0.4 does not contain all the CSP configurations as newer versions of sugar. 
 For that you will have to set/override your webserver config directly, here's an example .