Hi,
I'm trying to embed osTicket into out intranet which is based on SharePoint. I receive message that osTicket connection is not allowed.
I was trying to insert all possible things into "Allow System iFrame" and "Embedded Domain Whitelist" but I do not have domain name since I have internal (local) intranet.
Can some give me advice how to embed it into internal SharePoint? I tested iFrame in SharePoint with Youtube and works perfect.
Thank you in advance.
I've never tried to embed osTicket into Sharepoint. I don't even know if you can do such a thing.
I would start with these articles:
https://sharepointmaven.com/how-to-embed-content-from-other-websites-in-sharepoint-online/
https://support.microsoft.com/en-us/office/display-a-web-page-folder-or-file-on-a-classic-sharepoint-page-7f61feec-9b3d-4805-a960-07636ba59527
https://stackoverflow.com/questions/17545824/how-to-connect-sharepoint-with-php
I can inster html code into my SharePoint. That is not the issue. My issue how osTicket allow to be embeded as html - when I embed it with iFrame it says "connection is not allowed by osTickets". Any idea of html code to embed osTicket?
I used code similar to this one:
<html>
<iframe src="https://investa.si/ostic/" width="840" height="2000">
</iframe>
</html>
I have no problem embed for example Youtube video into SharePoint.
We use the Content-Security-Policy: frame-ancestors <source>; directive to control what site is allowed to use the system in an iFrame. It says in the CSP documentation (look at the <host-source> section) that it does in fact accept IP Addresses. So in theory all you would have to do is input something like http://192.168.1.1 in the Allow System iFrame field since you don’t have a domain name setup.
Cheers.
In all actuality, if it’s going to live solely on an intranet and there is no real security concerns you can simply remove all of the CSP frame-ancestors checks. Below is a link containing all of the lines you would need to remove If you wanted to go that route:
Cheers.
Thanks. I'll try and hope it will works!
I have only found 3 files and I removed lines (header.inc.php):
https://github.com/osTicket/osTicket/search?q=Content-Security-Policy&type=
I cant find 4th file. Is difference in versions?
Any ideas?
I have version 1.14.2
I solved my similar problem as follows.
Go to the ost_config table in the database and change the allow_iframes value to http: // *, https: // *
