Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Livechat widget and headers #6448

Closed
k0nsl opened this issue Mar 23, 2017 · 2 comments · Fixed by #17419
Closed

Livechat widget and headers #6448

k0nsl opened this issue Mar 23, 2017 · 2 comments · Fixed by #17419

Comments

@k0nsl
Copy link
Contributor

k0nsl commented Mar 23, 2017

Rocket.Chat Version: 0.54.0

I see this in the console log of Chromium:

Invalid 'X-Frame-Options' header encountered when loading 'https://chat.k0nsl.org/livechat': 'ALLOW-FROM https://k0nsl.org' is not a recognized directive. The header will be ignored.

I have correctly filled Livechat allowed domains with the appropriate value. I'm just throwing this out there in case it hasn't been caught already.

@tiredofit
Copy link

Being able to choose the Department via an API Call or Argument to the URL while limiting the users from being able to switch departments after the fact (However, an Agent being able to transfer would be useful) would give other live chat services a serious contender for competition. Eagerly Awaiting to see what comes out of this.

@HLFH
Copy link

HLFH commented Sep 19, 2017

The X-Frame-Options header has been obsoleted by the frame-ancestors directive from Content Security Policy Level 2.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment