Bug - Licence - Textarea - Empty - X-Frame-Options:DENY

  • Affected App
    WoltLab Suite Filebase

    Hello,


    With filebase, we can set licence which must be accepted when an user want download a file. There is currently a problem for licences that are hosted on remote sites. The textarea still empty due to the following restriction set by some remote servers:


    Code
    about:blank:1 Refused to display 'https://www.gnu.org/licenses/gpl-2.0.txt' in a frame because it set 'X-Frame-Options' to 'DENY'.


    Thanks you.

    ___________________________
    Laurent Declercq (nuxwin)
    i-MSCP project director

    Edited once, last by i-MSCP ().

  • @SoftCreatR


    I known ;) The problem is that filebase comes with a preset of licenses that are loaded in iframe. For the GPL licenses, the textarea stay empty due to the header set by the remote server. That must be considered as a bug because such preset should not be loaded through an iframe. If loading of a remote resource disallowed, a fix should be added in filebase (or even better, in WCF) to load them using another method. Best would be to not use iframe to load remote resources. An ajx function should be added which would allow to load remote resource through WCF:


    wcf ajx getRemoteObject <---> wcf php <-- (optional cache) --> remote content


    I don't see another way to solve the problem because there is not way to tell the browsers to ignore the X-Frame-Options header.

    ___________________________
    Laurent Declercq (nuxwin)
    i-MSCP project director

    Edited 9 times, last by i-MSCP ().

  • Problem is that filebase comes with preset of licenses


    Didn't knew that :)


    I know, that our Plugin Store has them and that it worked in the past. So gnu might have changed that over time.


    In this case, the easiest fix would be to have them hosted somewhere, where this header is not set (e.g. Github). Or ship them with the application, so everyone can host it's own copy.

  • @SoftCreatR


    I've edited my previous answer. Basically, we could also load remote resources through PHP and cache them to avoid such issue ;)

    ___________________________
    Laurent Declercq (nuxwin)
    i-MSCP project director

  • @SoftCreatR


    That is only an idea. The final decision to solve that issue is in your hands.

    ___________________________
    Laurent Declercq (nuxwin)
    i-MSCP project director

Participate now!

Don’t have an account yet? Register yourself now and be a part of our community!