diff --git a/api/src/Framework.php b/api/src/Framework.php
index cae05dda8f..9c7ec45587 100644
--- a/api/src/Framework.php
+++ b/api/src/Framework.php
@@ -149,7 +149,7 @@ abstract class Framework extends Framework\Extra
 		header('Content-type: text/html; charset='.Translation::charset());
 
 		// add CSP frame-src for apps which are just iframes
-		foreach($GLOBALS['egw_info']['user']['apps'] as $app => $data)
+		foreach($GLOBALS['egw_info']['user']['apps'] ?: [] as $app => $data)
 		{
 			if ($GLOBALS['egw_info']['apps'][$app]['status'] == 1 && !empty($data['index']) &&
 				preg_match('|^(https?://[^/]+)|', $data['index'], $matches))