Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Kanban modal window issue #3086

Closed
Maddmax76 opened this issue Jun 7, 2023 · 6 comments
Closed

Kanban modal window issue #3086

Maddmax76 opened this issue Jun 7, 2023 · 6 comments

Comments

@Maddmax76
Copy link

Good morning. In the Kanban view, when I open a request, a modal window appears, the title of the window is the subject of the request, there is the button to close, inside the window there is a gray panel with an icon that warns me that my site refused to connect.

can you help me?

Thank you

PHP version: 8.1.12-1ubuntu4
FreeScout version: 1.8.78

Immagine 2023-06-07 181522

@Maddmax76
Copy link
Author

It seems that in the modal window you are trying to open the conversation page in x-embed mode. Apache for safety does not allow it. Some idea?

@freescout-helpdesk
Copy link
Contributor

#1596

@Maddmax76
Copy link
Author

Thanks for the report, I tried to change the apache configuration but without success. Is there any other test I can do?
Thanks again

@Maddmax76
Copy link
Author

Solved, in addition to enabling "SAMEORIGIN" in "X-Frame-Options“ it is also necessary to enable the "Content-Security-Policy" for "SELF". When restarting Apache Kanban opens the tickets in the modal window.

@freescout-helpdesk
Copy link
Contributor

Solved, in addition to enabling "SAMEORIGIN" in "X-Frame-Options“ it is also necessary to enable the "Content-Security-Policy" for "SELF". When restarting Apache Kanban opens the tickets in the modal window.

Thanks for the info. Can you tell how you've set "Content-Security-Policy"?

@Maddmax76
Copy link
Author

sure, in the configuration file (in my case security.conf) I added the lines:

Header set X-Frame-Options: "SAMEORIGIN"
Header set Content-Security-Policy "frame-ancestor 'self';"

and everything, as if by magic, started to work

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants