Empty ticket-body in agent zoom view

[SJA1996]

Hello everyone,

I am currently deploying OTRS community edition version 6.0.10 with the FAQ and Time Scheduler add-ons within our company, and I've run across a major problem. When I'm viewing a ticket in the zoom view, the ticket body appears empty without any way of telling what's actually inside, see below as a refrence.


Upon further inspection it appears that it is an X-frame-option that seems to be blocking this element, I've found this as a generated error in Chrome's inspection tool.


I've tested the following which yielded no results:

• Setting DisableIFrameOriginRestricted to disabled.

• Clearing the web-browser's cache and cookies.

• Using different web-browsers. (Chrome, Firefox, IE, Edge.)

As far as the enviroment around OTRS goes, OTRS is isntalled on a CentOS 7 machine and we're running an Apache server that publically hosts the OTRS website with a LetsEncrypt certificate.

Now I honestly have no idea where to even start on this problem, have any of you experienced a similair issue, and if you did, how did you work around it or fixed it?


With kind regards,

Sjors.

[jojo]

check the apache default configuration and remove the DENY rule

[SJA1996]

Thanks for the reply.

I've looked in the httpd.conf file in my Apache server but I have found no such option. After adding the rule

Code: Select all

Header set X-Frame-Options SAMEORIGIN

the error changes, see below.



Does OTRS use it's own set of X-Frame-Options rule that could cause conflicts with Apache?


With kind regards,

Sjors

[jojo]

did you check the SSL config?

[SJA1996]

Hello,

I've checked the ssl.conf configuration and changed the following line:

Code: Select all

Header always set X-Frame-Options DENY

To..

Code: Select all

Header always set X-Frame-Options SAMEORIGIN

After doing this and restarting the Apache/httpd service I am no longer recieving the error and the zoom tickets are fully visible to me. Thank you!


With kind regards,

Sjors.