>>> [!note] Migrated issue <!-- Drupal.org comment --> <!-- Migrated from issue #3157062. --> Reported by: [drumm](https://www.drupal.org/user/3064) >>> <p>There are a few places which load <code>https://www.drupal.org/gitlab/jwt</code> in an iframe to initiate logging into GitLab, so we effectively have full single-sign-on. This is currently working well on Firefox and Chrome, but Safari does not allow it. We likely need to set a <code>Content-Security-Policy: frame-ancestors &hellip;</code> header on one of the sites to explicitly allow this.</p> <h3>Update</h3> <p>Drupal GitLab now becomes unusable on Safari soon (1 or 2 hours) after login and remains unusable for several days. It is not possible to work around the issue by logging out or using private browsing.</p> > Related issue: [Issue #3044233](https://www.drupal.org/node/3044233) > Related issue: [Issue #3155441](https://www.drupal.org/node/3155441)