Arosca

1. Policies and programs
2. Zendesk policies
3. Embedding Zendesk into an iframe is not allowed

Another option would be for you to make disabling the SAMEORIGIN header a config setting. We do not use ZenDesk as a public-facing tool; we only use it internally. Clickjacking is not a concern for...

• View comment
• Arosca
• Created August 09, 2016 14:01
• 4 votes

1. Policies and programs
2. Zendesk policies
3. Embedding Zendesk into an iframe is not allowed

Using the API is certainly an option, but represents a substantial effort in UI and integration development, and doesn't really add any value (since the UI would basically be the same as ZenDesk's)...

• View comment
• Arosca
• Edited August 09, 2016 13:53
• 4 votes