X-Frame-Options - https

[aeg]

Hi,

I was activating ssl cert on my OTRS web, after that I can't view the content in the tickets.
one of the errors are:
"Error while parsing the 'sandbox' attribute: 'ms-allow-popups' is an invalid sandbox flag.
in a frame because it set 'X-Frame-Options' to 'deny'."

I enabled ths feature "DisableIFrameOriginRestricted" but the content is still not showing up.
Any ideas why?

thanks

[jojo]

Check your Apache SSL Config and remove the Deny there

[aeg]

Check your Apache SSL Config and remove the Deny there

Hi jojo,

"Header always set X-Frame-Options DENY"

is it enough just to remove it, or should I put allow or something ?

[jojo]

just remove it, OTRS brings own config

[aeg]

ok thank you jojo.

Can I ask you one more thing,do you know the best method to forward http://exampe and https://example to https://example.company.com fqdn ?
we are using OTRS 6 and apache.