• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Issue Support registration is broken in modern browsers

nilsglow

New Pleskian
Hi,
I have just tried to create an account on Plesk Help Center. There is an IFRAME embedding Plesk Support, which is not allowed to be embedded in modern browsers because of Content-Security-Policy.
Is there an alternative way to register? I have an urgent support request...

Thanks,
Nils
 
hello, @nilsglow could you please clarify, which browser do you use to create an account? The full version and name would be helpful.

If any error messages are present in console f the browser - it would also be helpful, so please pass them along with the steps to reproduce the issue.

I appreciate your efforts,
Alex
 
Last edited:
I tried with with Chromium 83.0.4103.116 and get the following message in console:

Code:
Refused to display 'https://plesk.zendesk.com/registration/register' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

Also tried with Firefox 79.0 and get the following (sorry for the German):

Code:
Die "X-Frame-Options"-Direktive "SAMEORIGIN" verbietet das Laden von "https://plesk.zendesk.com/registration/register" in einem Frame.

I hope this can be solved soon. Because actually I have another issue, that is more important for me :): Issue - Subject Alternative Name for mail subdomain missing
 
This is still broken - I cannot log in using Firefox Developer 84:
Code:
The loading of “https://plesk.zendesk.com/access/login” in a frame is denied by “X-Frame-Options“ directive set to “SAMEORIGIN“
 
I tried to reproduce the issue on Firefox and Chrome, but failed to do so. All seems to be accessible.

Could it be possible that you are surfing through an anonymization proxy so that the frameset and the frame are using different ip addresses?
 
I'm not using a VPN or proxy. I do have uBlock Origin installed, but disabling it doesn't have any affect.

I've attached a HAR file containing the HTML and XHR responses to accessing the sign in page and a login request - the login returns a 403
 

Attachments

  • support.plesk.com_Archive [20-11-30 09-57-33].har.zip
    20.8 KB · Views: 0
Back
Top