Update start_server.sh

start_server.sh

@@ -3,17 +3,19 @@ JUPYTER_TOKEN="${JUPYTER_TOKEN:=huggingface}"
 
 NOTEBOOK_DIR="/data"
 
+# Disable default announcement popup
 jupyter labextension disable "@jupyterlab/apputils-extension:announcements"
 
+# Start JupyterLab with relaxed security headers to allow iframe embedding
 jupyter-lab \
     --ip 0.0.0.0 \
     --port 7860 \
     --no-browser \
     --allow-root \
     --ServerApp.token="$JUPYTER_TOKEN" \
-    --ServerApp.tornado_settings="{'headers': {'Content-Security-Policy': 'frame-ancestors *'}}" \
-    --ServerApp.cookie_options="{'SameSite': 'None', 'Secure': True}" \
     --ServerApp.disable_check_xsrf=True \
+    --ServerApp.cookie_options="{'SameSite': 'None', 'Secure': True}" \
+    --ServerApp.tornado_settings="{'headers': {'Content-Security-Policy': 'frame-ancestors *', 'X-Frame-Options': 'ALLOWALL'}}" \
     --LabApp.news_url=None \
     --LabApp.check_for_updates_class="jupyterlab.NeverCheckForUpdate" \
     --notebook-dir=$NOTEBOOK_DIR