ZABBIX Forums  
  #1  
Old 05-12-2017, 22:36
ChainBlock ChainBlock is offline
Junior Member
 
Join Date: Dec 2017
Location: Amsterdam, NL
Posts: 1
Question Cant load zabbix pages in iframe anymore

Hi Guys,

We are using zabbix for a few years now. In our welcome hall we have a big screen with some rotated slides containing information about our it infrastructure. One of the slides contained an Iframe in which we loaded a specific zabbix screen.

This always worked perfect till recently when we updated to the latest version of zabbix. Since then is not possible to load any zabbix page in an iframe. The iframes stay blank :'-(

I've been searching if could find something add like SAMEORIGIN, X-FRAME-OPTIONS, CSP, ALLOW FROM, etc But i could not find anything that possible could have been added in one of the latest updates. I can't find also nothing about it in the releasenotes/changelogs.

Does any one know if zabbix added this as a new security feature or maybe changed something in the httpd configuration? It there a way to get this fixed (or disabled)?

Thanks in advance
Reply With Quote
  #2  
Old 08-12-2017, 16:18
pc-nico pc-nico is offline
Junior Member
 
Join Date: May 2014
Posts: 7
Default

We use also a Frameset, at the top area Zabbix, at the buttom a newsticker and clock... since 3.4.4 zabbix sends a X-Frame Header....

you can commant out the Line 131 in /usr/share/zabbix/include/page_header.php

PHP Code:
header('X-Frame-Options: '.$x_frame_options); 
but it is removed on every update, not so cool methode...

better:
you can use Addons in the Browser to ignore X-Frame Header

for Chrome use: https://chrome.google.com/webstore/d...kamfmkohkpodhe

works fine for us
Reply With Quote
Reply

Tags
iframe

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 07:59.