in a frame because it set 'X-Frame-Options' to 'sameorigin'.

[Patrick Mikulla]

Hello,

In our Service Desk, we have a search function. If i click on the result (confluence) the side is loading, but in the IFrame is nothing to see. I have done these things but nothing changes.

https://confluence.atlassian.com/confkb/confluence-page-does-not-display-in-an-iframe-827335781.html

I have done both Resolution.

Do you have a hint for me? 

[leneborma]

X-Frame-Options is a header included in the response to the request to state if the domain requested will allow itself to be displayed within a frame. It has nothing to do with javascript or HTML, and cannot be changed by the originator of the request. You can't set X-Frame-Options on the iframe. That is a response header set by the domain from which you are requesting the resource . They have set the header to SAMEORIGIN in this case, which means that they have disallowed loading of the resource in an iframe outside of their domain. So you cannot embed their website into yours. Browsers when see that the response header contains X-Frame-Options: SAMEORIGIN, they check your domain and block the rendering of the <iframe>. It is a security measure to avoid clickjacking.

[moofoo]

Hi Patte,

Thanks for your question.

We have added numerous improvements to the customer portal in Jira Service Desk Server / Data Center 4.6 and 4.7. Some of these improvements resolve the issues related to the knowledge base article preview - we now show them as a part of the customer portal. This uses the same layout and interface as the rest of the customer portal. We no longer use a sidebar for previews in our latest versions.

You can read more about the 4.6 and 4.7 changes here:

https://confluence.atlassian.com/servicedesk/jira-service-desk-4-6-x-release-notes-979416498.html

https://confluence.atlassian.com/servicedesk/jira-service-desk-4-7-x-release-notes-987143432.html

Thank you,
Artem,
Jira Service Desk team