Note: an IP allowlist on the target site must include the web-client
viewers; seen on the R1.05 test server (200 from the server, 403 from
another PC).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The user added CSP_ENTRY frame-src 'self' and the test host to
jwuiisg.sup and restarted CI Server (JWUIISG reads the file only at
start). The header then allowed the host and the external page showed
in a temporary display in the web client (display removed again).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
With the user's approval two temporary displays were deployed, viewed in
the web client and removed (display folders identical before/after):
- a 2-pen trend draws on the R1.05 web client (ISS-096 closed; ISS-041
fixed on R1.05);
- the default R1.05 Content-Security-Policy blocks external pages in a
web browser component; same-origin pages load (ISS-111).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
V5 (read-only): Layouts.readme and components identical; JCEF browser
component now loaded from tls\exe\lib\jcef; connectrdp.cmd present;
jwuiutl help identical; AOG_UAC_MethodArg_Call2 added, AOG_OPCUA_Methods
not installed; web trend DataSource.js re-enables the pen checks behind
ISS-041 (probably fixed, not tested).
V6 (read-only): hisdbg 1/20/6 as on R1.03; history and item start/stop
scripts differ only by the extension hooks.
ISS-092, 097, 100, 101 closed; notes on ISS-094, 096.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>