Roundcube Community Forum

 

Open "settins" in new window

Started by athoomi, October 24, 2012, 07:37:25 AM

Previous topic - Next topic

athoomi

Hello,

we have to use Roundcube (classic skin) in an Iframe. If the user clicks on "settings", he can't do anything. If the user opens the "settings" link in a new windows there are no problems.

Is there any possibility to change the link behaviour? I had a look to \includes\taskbar.html, but I couldn't find a solution.

Thanks in advance,

Thomas

JohnDoh

I'm not sure if it is related but what is the x_frame_options config param set to in your config? see your http://trac.roundcube.net/ticket/1488454
Roundcube Plugins: Contextmenu, SpamAssassin Prefs, and more...

athoomi

I know this issue. I've got:

// X-Frame-Options HTTP header value sent to prevent from Clickjacking.
// Possible values: sameorigin|deny. Set to false in order to disable sending them
$rcmail_config['x_frame_options'] = false;


If this Option ist set to "true". I'm not able to to anything. After the change to "false", I'm able to login and work with Roundcube, but I can't go to the settingpage.

rosali

<iframe src="http://pathtoroundcube.tld" width="100%" height="100%"></iframe>

Works for me without any issue for both, classic and larry skins.
Regards,
Rosali

athoomi

Quote from: rosali on October 25, 2012, 10:06:18 AM
<iframe src="http://pathtoroundcube.tld" width="100%" height="100%"></iframe>

Works for me without any issue for both, classic and larry skins.

Works for me too, but only when the html-file is on the same domain.

I remember, that there was a similar issue with the calendar plugin.

rosali

Works for me with:


// X-Frame-Options HTTP header value sent to prevent from Clickjacking.
// Possible values: sameorigin|deny. Set to false in order to disable sending them
$rcmail_config['x_frame_options'] = false;//'sameorigin';


See http://svn.mail4us.net/iframe.html

Regards,
Rosali

athoomi

Doesn't work for me unfortunately...