Original modal windows are not displayed

[buarquew]

Code of Conduct

• I agree to follow this project's Code of Conduct

Is there an existing issue for this?

• I have searched the existing issues

Version

GLPI 10.0.14

Bug description

Dear all, have a great afternoon to all.

I have a problem with GLPI. Both in my test and production environments, which are on different machines, and are also completely different installations, where in the production environment I started the installation again from scratch, starting with httpd, then the bank, then php, downloading a new installing GLPI directly from the website and populating the database again, both show the following error:

When we open a modal window, for example: the window to add a new computer model when creating this asset, the window to change what appears in the asset report, etc. When clicking on these functions, a modal window opens in which the content is not displayed, in Google Chrome it says "The connection to 172.16.X.XX was refused", in Edge it basically shows the same thing, but has the option to open in a new window, and when opened, it normally displays the content, but not as a modal but as a page.

I'm new to implementing GLPI, would there be a problem with file permissions? or network problem or because both are running on a hypervisor?

If anyone can help me I would be very grateful

Relevant log output

No response

Page URL

No response

Steps To reproduce

No response

Your GLPI setup information

No response

Anything else?

No response

[buarquew]

Solution
I ran into same issue. But in Apache 2.4.25, it is in apache2/conf-available/security.conf
added
Header set Content-Security-Policy: "frame-ancestors 'self'"
Don't forget to restart Apache2
service apache2 restart

you can also use

Header always set Content-Security-Policy: "frame-ancestors https://yoursite.com"
to really limit it to one site.