This has nothing to do with my site or its configuration.
"https://our.umbraco.org/repo" is replying with "X-Frame-Options: SAMEORIGIN" now, which means that Umbraco 7.3.8, which shows the package repository in an iframe, now will not work.
Here is a codepen so that you can reproduce it for yourself:
Ah! Yes, silly me, of course it must be on our end. The problem is that to the best of my knowledge we haven't changed anything. I looked into it and could not find the actual place where we set this header.
I did, however, recently add a captcha to the registration page and that seems to have triggered some other update making that the default header (which is a good thing.. except in this case). I found this: http://stackoverflow.com/a/30372517/5018
So I've suppressed the header for the package repository (and only for the package repository) and it should work again. Can you let me know if it's now fixed for you? The Codepen works again.
Umbraco Package Repository broken in 7.3.8
As of today, I'm getting the following when attempting to open the Umbraco package repository in the admin panel:
Refused to display 'https://our.umbraco.org/repo?repoGuid=...' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.
I assume this was probably turned on by accident, and potentially because of this issue:
https://www.quppa.net/blog/2013/11/28/html-antiforgerytoken-sets-an-x-frame-options-header-with-the-value-sameorigin/
Can somebody who manages the hosting of the Umbraco package repository please look into this issue?
Your site is not allowing frames to be shown from other sites :) it's in your web.config. You have 3 options:
This has nothing to do with my site or its configuration. "https://our.umbraco.org/repo" is replying with "X-Frame-Options: SAMEORIGIN" now, which means that Umbraco 7.3.8, which shows the package repository in an iframe, now will not work.
Here is a codepen so that you can reproduce it for yourself:
http://codepen.io/anon/pen/QGZaKE
Here is a screenshot showing that the response is coming from our.umbraco.org, and not my server:
Ah! Yes, silly me, of course it must be on our end. The problem is that to the best of my knowledge we haven't changed anything. I looked into it and could not find the actual place where we set this header.
I did, however, recently add a captcha to the registration page and that seems to have triggered some other update making that the default header (which is a good thing.. except in this case). I found this: http://stackoverflow.com/a/30372517/5018
So I've suppressed the header for the package repository (and only for the package repository) and it should work again. Can you let me know if it's now fixed for you? The Codepen works again.
I can confirm that the package repository browser is now working in Umbraco 7.3.8. Thank you for fixing this.
is working on a reply...