Is there a way to add Roundcube so that it can be viewed inside Nextcloud (not in some separate tab, for instance)? I realize that Roundcube is trying to prevent XSS attacks, but I thought someone might know a way around this.
I don’t really see the point of doing this, to be honest, and I’ve never really understood why Nextcloud opens apps in the same tab in the first place. I mean, unless you really only want to use one app at a time, you’d usually prefer to open them in a separate tab, so you can easily switch back and forth without closing anything. But maybe that’s just me.
Also, if you really only want to use Roundcube at a time, why does it even need to be integrated into Nextcloud at all? It doesn’t really make much of a functional difference compared to just using your browser’s bookmarks bar, unless it’s actually integrated with Nextcloud in a meaningful way. For example: using Nextcloud for authentication, attaching files from Nextcloud directly, or accessing your Nextcloud contacts.
The last part can be achieved via the CardDAV plugin in Roundcube, and for that to work, it doesn’t need to be integrated through External Sites in Nextcloud.
You’re right - this is due to Roundcube blocking embedding via X-Frame-Options or Content-Security-Policy. To view Roundcube inside Nextcloud (not a separate tab), you’d need to modify Roundcube’s config to allow framing from your Nextcloud domain. Look for X-Frame-Options in your web server or Roundcube headers and set it to ALLOW-FROM your-nextcloud-domain. Be cautious though - this weakens security and is not recommended for public-facing servers.
