X-Frame settings

[Mark Holak]

I know this issue has been reported before, and I've read through the documentation and I am still having trouble doing the recommended settings.

I am self hosting Jira and Jira Service Desk. I want to embed the support form into an iFrame on our website which is on a different server. If there is a better way to get JSD request form on an external site, please let me know that as well.

I have white-listed my external domain inside jira and the test shows both incoming and outgoing are allowed.

I have set: set JVM_SUPPORT_RECOMMENDED_ARGS="-Dcom.atlassian.jira.clickjacking.protection.disabled=true"

With and without the encapsulating "

Yes, I restarted the server for each attempt and tried running the bat directly

I'm getting the following error in Chrome:

Refused to display 'http://[server IP]/servicedesk/customer/portal/1/user/login?destination=portal%2F1' in a frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self'".

My Jira HTTP access logs reports:

[ internal IP ] i897x11512x2 - [03/Dec/2018:14:57:28 -0600] "GET http://[ external IP ]/servicedesk/customer/portal/1 HTTP/1.1" - - - "http://[ webserver domain ]/support/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" -

[ internal IP ] o897x11512x2 - [03/Dec/2018:14:57:28 -0600] "GET http://[ external IP ]/servicedesk/customer/portal/1 HTTP/1.1" 303 0 0.0060 "http://[ webserver domain ]/support/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" -

[ internal IP ] i897x11513x2 - [03/Dec/2018:14:57:28 -0600] "GET http://[ external IP ]/servicedesk/customer/portal/1/user/login HTTP/1.1" - - - "http://[ webserver domain ]/support/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" -

[ internal IP ] o897x11513x2 - [03/Dec/2018:14:57:28 -0600] "GET http://[ external IP ]/servicedesk/customer/portal/1/user/login HTTP/1.1" 200 16250 0.0420 "http://[ webserver domain ]/support/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" -

[ internal IP ] i897x11514x1 - [03/Dec/2018:14:57:29 -0600] "GET http://[ external IP ]/rest/collectors/1.0/configuration/trigger/dd87cb2f HTTP/1.1" - - - "http://[ webserver domain ]/support/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" -

[ internal IP ] o897x11514x1 - [03/Dec/2018:14:57:29 -0600] "GET http://[ external IP ]/rest/collectors/1.0/configuration/trigger/dd87cb2f HTTP/1.1" 200 152 0.0030 "http://[ webserver domain ]/support/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" -

[Mark Holak · Accepted solution]

The documentation I found did not state that there is a different procedure when running Jira as an installed service. 

For those that install Jira this way you must modify the services in a very particular manner. See the follow post: https://community.atlassian.com/t5/Confluence-questions/X-Frames-clickacking-JVM-propery-not-working-anymore-since/qaq-p/909358

Following the steps inside gave me the correct solution.