Project

General

Profile

Actions
Copy link

Bug #6373

closed

Rudder 3.0 ncf editor chrome, clickjacking alert

Added by Florian Heigl over 9 years ago. Updated over 9 years ago.

Status:
Rejected
Priority:
N/A
Assignee:
-
Category:
Web - Config management
Target version:
-
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

Hi,

After switching to chrome I found I could not access NCF. All I got was a blank white area.
I think this isn't my setup but some protection on NCF side that blocks working with it from the rudder web UI

It might actually be an NCF issue, but filing it here, since this is where it manifests.

Related issues 1 (0 open — 1 closed)

Related to Rudder - Bug #6321: Apache config for NCF builder is not suitable for apache 2.4RejectedDennis Cabooter2015-03-02Actions
Actions
Copy link
 #1

Updated by Florian Heigl over 9 years ago

Noticed I now get the very same in firefox.

Can be closed, the problem was on my own side.
I put Header always set X-Frame-Options DENY in the apache config while locking it down (The rudder default config didn't even have a -SSLv3, so I went crazy...)

Actions
Copy link
 #2

Updated by Dennis Cabooter over 9 years ago

I do have the problem in Firefox. :(

Actions
Copy link
 #3

Updated by François ARMAND over 9 years ago

Dennis, did you changed some header to ?

Actions
Copy link
 #4

Updated by Vincent MEMBRÉ over 9 years ago

Dennis, I have other questions about that:

What is the version of python you got on your server ?

Do you have any logs in /var/log/apache2/error.log on your rudder server when accesing the editor ?

Actions
Copy link
 #5

Updated by Dennis Cabooter over 9 years ago

@fanf: I didn't change the header. I'm not sure if the syntax is the same in Apache 2.4 and where to put it.

@Vince_McBuche:

# dpkg -l | grep "Interactive high-level object-oriented language" | grep -v stdlib
ii  python2.7                             2.7.6-8                              amd64        Interactive high-level object-oriented language (version 2.7)
ii  python3.4                             3.4.0-2ubuntu1                       amd64        Interactive high-level object-oriented language (version 3.4)
# python --version
Python 2.7.6
Actions
Copy link
 #6

Updated by François ARMAND over 9 years ago

  • Status changed from New to Rejected
  • Reproduced set to No

Dennis, I'm closing that one as the cause seems to be different for you, and I propose to either treat it in #6321 or open a new ticket if it appears that it is not linked with #6321.

Actions
Copy link

Also available in: Atom PDF