iFrame options for intranet

Frella

Hi,

I'm trying to embed osTicket into out intranet which is based on SharePoint. I receive message that osTicket connection is not allowed.

I was trying to insert all possible things into "Allow System iFrame" and "Embedded Domain Whitelist" but I do not have domain name since I have internal (local) intranet.

Can some give me advice how to embed it into internal SharePoint? I tested iFrame in SharePoint with Youtube and works perfect.

Thank you in advance.

ntozier

I've never tried to embed osTicket into Sharepoint. I don't even know if you can do such a thing.

I would start with these articles:
https://sharepointmaven.com/how-to-embed-content-from-other-websites-in-sharepoint-online/
https://support.microsoft.com/en-us/office/display-a-web-page-folder-or-file-on-a-classic-sharepoint-page-7f61feec-9b3d-4805-a960-07636ba59527
https://stackoverflow.com/questions/17545824/how-to-connect-sharepoint-with-php

Frella

I can inster html code into my SharePoint. That is not the issue. My issue how osTicket allow to be embeded as html - when I embed it with iFrame it says "connection is not allowed by osTickets". Any idea of html code to embed osTicket?

I used code similar to this one:

Frella

Frella

I have no problem embed for example Youtube video into SharePoint.

KevinTheJedi

@Frella

We use the Content-Security-Policy: frame-ancestors <source>; directive to control what site is allowed to use the system in an iFrame. It says in the CSP documentation (look at the <host-source> section) that it does in fact accept IP Addresses. So in theory all you would have to do is input something like http://192.168.1.1 in the Allow System iFrame field since you don’t have a domain name setup.

Cheers.

KevinTheJedi

@Frella

In all actuality, if it’s going to live solely on an intranet and there is no real security concerns you can simply remove all of the CSP frame-ancestors checks. Below is a link containing all of the lines you would need to remove If you wanted to go that route:

https://github.com/osTicket/osTicket/search?q=Content-Security-Policy&type=

Cheers.

Frella

Thanks. I'll try and hope it will works!

Frella

I have only found 3 files and I removed lines (header.inc.php):
https://github.com/osTicket/osTicket/search?q=Content-Security-Policy&type=

I cant find 4th file. Is difference in versions?

Any ideas?

Frella

I have version 1.14.2

serqet06

I solved my similar problem as follows.

Go to the ost_config table in the database and change the allow_iframes value to http: // *, https: // *

KevinTheJedi

@Frella

You are missing the include/staff/login.header.php file.

Cheers.