• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Issue Support registration is broken in modern browsers

nilsglow

New Pleskian
Hi,
I have just tried to create an account on Plesk Help Center. There is an IFRAME embedding Plesk Support, which is not allowed to be embedded in modern browsers because of Content-Security-Policy.
Is there an alternative way to register? I have an urgent support request...

Thanks,
Nils
 
hello, @nilsglow could you please clarify, which browser do you use to create an account? The full version and name would be helpful.

If any error messages are present in console f the browser - it would also be helpful, so please pass them along with the steps to reproduce the issue.

I appreciate your efforts,
Alex
 
Last edited:
I tried with with Chromium 83.0.4103.116 and get the following message in console:

Code:
Refused to display 'https://plesk.zendesk.com/registration/register' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

Also tried with Firefox 79.0 and get the following (sorry for the German):

Code:
Die "X-Frame-Options"-Direktive "SAMEORIGIN" verbietet das Laden von "https://plesk.zendesk.com/registration/register" in einem Frame.

I hope this can be solved soon. Because actually I have another issue, that is more important for me :): Issue - Subject Alternative Name for mail subdomain missing
 
This is still broken - I cannot log in using Firefox Developer 84:
Code:
The loading of “https://plesk.zendesk.com/access/login” in a frame is denied by “X-Frame-Options“ directive set to “SAMEORIGIN“
 
I tried to reproduce the issue on Firefox and Chrome, but failed to do so. All seems to be accessible.

Could it be possible that you are surfing through an anonymization proxy so that the frameset and the frame are using different ip addresses?
 
I'm not using a VPN or proxy. I do have uBlock Origin installed, but disabling it doesn't have any affect.

I've attached a HAR file containing the HTML and XHR responses to accessing the sign in page and a login request - the login returns a 403
 

Attachments

  • support.plesk.com_Archive [20-11-30 09-57-33].har.zip
    20.8 KB · Views: 0
Back
Top