Optimized CSP check

roles/srv-web-7-7-inj-port-ui-desktop/templates/iframe-handler.js.j2

@@ -3,12 +3,14 @@
   var allowedOrigin = "https://{{ domains | get_domain('web-app-port-ui') }}";
 
   function notifyParent() {
-    try {
-      window.parent.postMessage({
-        type: "iframeLocationChange",
-        href: window.location.href
-      }, allowedOrigin);
-    } catch (e) {}
+    if (window.self !== window.top) {
+      try {
+        window.parent.postMessage({
+          type: "iframeLocationChange",
+          href: window.location.href
+        }, allowedOrigin);
+      } catch (e) {}
+    }
   }
 
   function forceExternalLinks() {

roles/web-svc-logout/config/main.yml

@@ -3,6 +3,7 @@ features:
   css:              true
   port-ui-desktop:  true
   javascript:       false
+  logout:           false
 domains:
   canonical:
     - "logout.{{ primary_domain }}"

roles/web-svc-logout/vars/main.yml

@@ -8,8 +8,5 @@ container_port:               8000
 # @todo implement the calling of also dependency domains (propably the easiest to write a script which adds all dependencies to group_names)
 logout_domains: >-
   {{
-    (
-      [primary_domain] +
-      (applications | logout_domains(group_names))
-    ) | unique | join(',')
+    (applications | logout_domains(group_names)) | unique | join(',')
   }}