roundcube X-Frame-Options

[MMarko]

Roundcube has problems loading content due to X-Frame-Options settings. Basicaly nothing gets loaded in iframe due to, for example:

?_task=settings&_action=add-identity&_iid=0&_framed=1' in a frame because it set 'X-Frame-Options' to 'DENY, sameorigin'

fallback to DENY. So I had to unset X-Frame-Options in htaccess for roundcube.


Is there any other solution? Since roundcube is half working on default DirectAdmin install.

 

[zEitEr]

Hello,

Don't use

X-Frame-Options: DENY

then with Rouncube.

It works fine with

X-Frame-Options: sameorigin

https://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-Options