diff --git a/pigx-visual/pigx-bi-platform/src/main/java/com/pig4cloud/pigx/ureport/config/WebSecurityConfigurer.java b/pigx-visual/pigx-bi-platform/src/main/java/com/pig4cloud/pigx/ureport/config/WebSecurityConfigurer.java
index f072db566..b640e7e77 100755
--- a/pigx-visual/pigx-bi-platform/src/main/java/com/pig4cloud/pigx/ureport/config/WebSecurityConfigurer.java
+++ b/pigx-visual/pigx-bi-platform/src/main/java/com/pig4cloud/pigx/ureport/config/WebSecurityConfigurer.java
@@ -43,9 +43,10 @@ public class WebSecurityConfigurer extends WebSecurityConfigurerAdapter {
 	@Override
 	@SneakyThrows
 	protected void configure(HttpSecurity http) {
-		http.formLogin().loginPage("/login.html").loginProcessingUrl("/login").failureHandler(new LoginFailureHandler())
-				.and().authorizeRequests().antMatchers("/login.html", "/login", "/actuator/**").permitAll().anyRequest()
-				.authenticated().and().csrf().disable();
+		http.headers().frameOptions().disable().and().formLogin().loginPage("/login.html").loginProcessingUrl("/login")
+				.failureHandler(new LoginFailureHandler()).and().authorizeRequests()
+				.antMatchers("/login.html", "/login", "/actuator/**").permitAll().anyRequest().authenticated().and()
+				.csrf().disable();
 	}
 
 	/**