Configure the X-Frame-Options add_headers correctly about freescout HOT 4 CLOSED

There are some instructions in the Troubleshooting section of https://freescout.net/module/knowledge-base/

from freescout.

thanks for the suggestion, starting from that article I learned that to allow multiple sources it is necessary to use the "ALLOW-FROM origin" directive of the X-Frame-Options, which however is obsolete, and some browsers may ignore it.
To solve the problem you need to use the Content-Security-Policy, in which the "frame-ancestors" directive gives the possibility to specify a list of addresses from which it is possible to open FreeScout and the Knowledge Base:

Header set Content-Security-Policy "frame-ancestors 'self' address1 address2 .... addressN;"

from freescout.

Try to add the following parameter in the .env file and clear cache:

APP_CSP_CUSTOM="; frame-ancestors 'self' https://example.org;"

from freescout.

thanks for this other solution, I will try to apply it if after a trial period I still encounter difficulties, for now the CSP frame-ancestors declared in the Apache security configuration seem to work.

Thanks again

from freescout.