Roundcube Community Forum

Release Support => Pending Issues => Topic started by: athoomi on October 24, 2012, 07:37:25 AM

Title: Open "settins" in new window
Post by: athoomi on October 24, 2012, 07:37:25 AM
Hello,

we have to use Roundcube (classic skin) in an Iframe. If the user clicks on "settings", he can't do anything. If the user opens the "settings" link in a new windows there are no problems.

Is there any possibility to change the link behaviour? I had a look to \includes\taskbar.html, but I couldn't find a solution.

Thanks in advance,

Thomas
Title: Re: Open "settins" in new window
Post by: JohnDoh on October 24, 2012, 08:40:16 AM
I'm not sure if it is related but what is the x_frame_options config param set to in your config? see your http://trac.roundcube.net/ticket/1488454
Title: Re: Open "settins" in new window
Post by: athoomi on October 24, 2012, 10:06:24 AM
I know this issue. I've got:

// X-Frame-Options HTTP header value sent to prevent from Clickjacking.
// Possible values: sameorigin|deny. Set to false in order to disable sending them
$rcmail_config['x_frame_options'] = false;


If this Option ist set to "true". I'm not able to to anything. After the change to "false", I'm able to login and work with Roundcube, but I can't go to the settingpage.
Title: Re: Open "settins" in new window
Post by: rosali on October 25, 2012, 10:06:18 AM
<iframe src="http://pathtoroundcube.tld" width="100%" height="100%"></iframe>

Works for me without any issue for both, classic and larry skins.
Title: Re: Open "settins" in new window
Post by: athoomi on October 26, 2012, 12:55:47 AM
Quote from: rosali on October 25, 2012, 10:06:18 AM
<iframe src="http://pathtoroundcube.tld" width="100%" height="100%"></iframe>

Works for me without any issue for both, classic and larry skins.

Works for me too, but only when the html-file is on the same domain.

I remember, that there was a similar issue with the calendar plugin.
Title: Re: Open "settins" in new window
Post by: rosali on October 29, 2012, 12:18:03 AM
Works for me with:


// X-Frame-Options HTTP header value sent to prevent from Clickjacking.
// Possible values: sameorigin|deny. Set to false in order to disable sending them
$rcmail_config['x_frame_options'] = false;//'sameorigin';


See http://svn.mail4us.net/iframe.html

Title: Re: Open "settins" in new window
Post by: athoomi on November 05, 2012, 04:40:30 AM
Doesn't work for me unfortunately...