Not display articles body

[mbolzoni]

Hello all,
I have problems with the article display, not seen the parts in the iframe.
Example in Chrome/Firefox (ticket zoom):



On Edge/Internet Explorer we see article body:



Security options are disabled on OTRS:



And security options on web server are:

Code: Select all

header always append x-frame-options "sameorigin"
header always set x-content-type-options "nosniff"
header always set x-xss-protection "1; mode=block"

Also disabling them does not work.
Anyone some idea to fix this issue?


Regards
Manuel

[mbolzoni]

Can someone help me?


Screenshot from Google Chrome version: 57.0.2987.110

Body of frame is empty but not on Edge/IE.
There is the option to force the articles in plain text or disable iframe usage on articles?
It may be using an option to improve the html viewing articles but actually decreases the view compatibility in browsers?

Please help me

[jojo]

please revert the security settings to the default

[mbolzoni]

Security settings reverted:


Config Settings in Framework → Core::Web

But don't see articles, the problem is still present.

[jojo]

as it is working for others it might be a localissue with your browser or setup. I suggest to reset the config to the defaults and try again, also check if you are using the latest version of OTRS, followed the installation guidelines and if you have locally installed browser add ons which might be the cause

[mbolzoni]

OTRS version is last (5.0.17), I was hoping that the update would solve the problem but has not done.
Reset the config to the defaults delete data of queues and tickets (and others)?
There is a procedure to check the values different from the defaults?

Thank you for the reply

[mbolzoni]

Problem is DisableIFrameOriginRestricted (Framework → Core::Web): if disable response with "X-Frame-Options: DENY".
If X-Frame-Options is set on web server configuration on Chrome/Firefox cause error (double response).
Solution:
if you use X-Frame-Options rules on web server add "Header always unset X-Frame-Options" on mod_headers.c in directory on OTRS apache configuration (for example)

Now see all OTRS frame in all browser