Error opening Roundcube

[cfreire]

Hi my friends, I have Ubuntu 20.04 with Sentora 2.0.0 and I am getting an error when I have roundcube open..... The error says:


The website will not allow Firefox to display the page if another site has embedded it... 

I don t know hat is bad. Please your help....

[TGates]

Hi my friends, I have Ubuntu 20.04 with Sentora 2.0.0 and I am getting an error when I have roundcube open..... The error says:


The website will not allow Firefox to display the page if another site has embedded it... 

I don t know hat is bad. Please your help....

I haven't seen this problem before. I checked Google and there is a lot about it. Apparently it has become common.
It has to do with ' X-Frame-Options' which I am looking into right now and will post back my findings.

I am also curious if you get the same issue when using phpMyAdmin..?
RoundCube and phpMyAdmin both use X-Frame-Options to prevent XSS/click-jacking.

This is from the FireFox site: https://support.mozilla.org/en-US/kb/xfr...error-page

It could also be a configuration issue with how you installed Sentora. Specifically the panel login URL that you set when installing Sentora.
Are you using the same URL for the panel that you setup during installation?

[cfreire]

Hi, there is not any problem with phpMyadmin, the issued is just with roundcube.... Are there steps to reinstall roundcube maybe?
Thanks, regards.

[TGates]

Hi, there is not any problem with phpMyadmin, the issued is just with roundcube.... Are there steps to reinstall roundcube maybe?
Thanks, regards.

I'll keep looking into it. Give me a couple days to sort through it.

[cfreire]

I'll keep looking into it. Give me a couple days to sort through it.

Thank you

[TGates]

I'm not sure what has caused this issue for you, but I have found this:
(Always make a backup!)

./program/js/app.js (replace app.min.js with this):
Code Select Expand

Code:

    // clickjacking protection
    if (this.env.x_frame_options) {
      try {
        // bust frame if not allowed
   
        if (this.env.x_frame_options == 'deny' && top.location.href != self.location.href) {
          top.location.href = self.location.href;
        } else if (this.env.x_frame_options.indexOf('ALLOW-FROM') == 0) {
   
        } else if (top.location.hostname != self.location.hostname) {
          throw 1;
        }
      } catch (e) {
        // possible clickjacking attack: disable all form elements
        $('form').each(function(){ ref.lock_form(this, true); });
        this.display_message("Blocked: possible clickjacking attack!", 'error');
        return;
      }
    }

Original post: https://www.roundcubeforum.net/index.php?topic=21680.0

[cfreire]

I'm not sure what has caused this issue for you, but I have found this:
(Always make a backup!)
Original post: https://www.roundcubeforum.net/index.php?topic=21680.0

I have replaced the app.js file, but the output is the same error.
Regards.

[TGates]

Ok, I'll keep digging.

I'm not sure if it is a good idea to comment out the line of code that includes ' X-Frame-Options' which I noticed some other people tried.

[jamescIKVHJA]

Thank you for sharing this issue/solution! Here are some additional suggestions based on my experience:

Logs Check: If the problem persists, the /var/sentora/logs/ directory might provide error details (e.g., apache-error.log).
Permissions: Ensure Sentora’s core folders (e.g., /etc/sentora/) have correct ownership (chown -R zpanel:zpanel /path).
Version Compatibility: Confirm your OS (e.g., Ubuntu 20.04) is officially supported.
Let me know if you need further debugging help

[shuwna]

Ensure that your Roundcube configuration allows embedding. Look for the config/config.inc.php file and check for any settings related to iframe or X-Frame-Options and Clear Browser Cache, Sometimes, clearing your browser's cache can help resolve loading issues.