CRM: Adding new customer

[haimiko]

Freescout version: 1.7.24
CRM Version: 1.0.6

Issue: Adding new customer with FireFox will display the following error:

[freescout-helpdesk]

Can you reproduce the issue on demo.freescout.net?

[haimiko]

No. Works on demo site. I've reviewed the HTML and can't find any domains other than mine. Any suggestions?

…

On Tue, Dec 21, 2021 at 10:42 PM FreeScout ***@***.***> wrote: Can you reproduce the issue on demo.freescout.net? — Reply to this email directly, view it on GitHub <#1596 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAZKIVS7TY5PEKNNPFZMN73USFQNJANCNFSM5KQ3EXNA> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[haimiko]

This is the console error:

The loading of “https://mysite.com/customers/new?x_embed=1” in a frame is denied by “X-Frame-Options“ directive set to “DENY“.

[freescout-helpdesk]

Your server sends “DENY“ in “X-Frame-Options“ header. You need to change it to "SAMEORIGIN".

[freescout-helpdesk]

Try to put the following file into /app/Http/Middleware replacing existing ResponseHeaders.php

ResponseHeaders.zip

[haimiko]

Thanks . Tried it but it's now sending "SAMEORIGIN" and "DENY" right after.

[haimiko]

Fixed it by adding the add_header X-Frame-Options "SAMEORIGIN"; to my nginx config.

Thank you for the direction!

[freescout-helpdesk]

It looks like in this case you will have issues when adding FreeScout chat and other widgets to the website.

Try the following:

proxy_hide_header X-Frame-Options;
fastcgi_hide_header X-Frame-Options;

Also see #3086 (comment)

[freescout-helpdesk]

Ideally you should find out what (web server, hosting or some non-official module) adds X-Frame-Options header and get rid of this header.

[karrierekick-dev]

In my case, the generated symlink files in public/modules/ had a wrong path.

They should point to the corresponding module folder. For example: The Chat widget has a symlink "chat". When opening such a link you should be forwarded to the directory it is pointing to which should be "Modules/Chat/Public".

In my case the "chat" link pointed to "/html/support/Modules/Chat/Public"
I've edited the link using WinSCP and replaced the path with a relative one: "../../Modules/Chat/Public".

After that, everything works.