View Roundcube In Nextcloud

I have gone to:

Administration settings > External sites

Then typed in a name and a complete URL

(in this case “Roundcube” with URL https://roundcube.mofisherman.xyz

The icon for the added website then appears in the Nextcloud toolbar. However, when I try to open it, I get the following message:





Is there a way to add Roundcube so that it can be viewed inside Nextcloud (not in some separate tab, for instance)? I realize that Roundcube is trying to prevent XSS attacks, but I thought someone might know a way around this.

1 Like

I don’t really see the point of doing this, to be honest, and I’ve never really understood why Nextcloud opens apps in the same tab in the first place. I mean, unless you really only want to use one app at a time, you’d usually prefer to open them in a separate tab, so you can easily switch back and forth without closing anything. But maybe that’s just me. :wink:

Also, if you really only want to use Roundcube at a time, why does it even need to be integrated into Nextcloud at all? It doesn’t really make much of a functional difference compared to just using your browser’s bookmarks bar, unless it’s actually integrated with Nextcloud in a meaningful way. For example: using Nextcloud for authentication, attaching files from Nextcloud directly, or accessing your Nextcloud contacts.

The last part can be achieved via the CardDAV plugin in Roundcube, and for that to work, it doesn’t need to be integrated through External Sites in Nextcloud. :wink:

@Nextcumulus_fan welcome to the community :waving_hand:

2 Likes

Oh, nice! I didn’t know there was an actively maintained app for Roundcube. I only knew the older ones that were abandoned at some point. :slight_smile:

yeah, saw they went active again since v 29

You’re right - this is due to Roundcube blocking embedding via X-Frame-Options or Content-Security-Policy. To view Roundcube inside Nextcloud (not a separate tab), you’d need to modify Roundcube’s config to allow framing from your Nextcloud domain. Look for X-Frame-Options in your web server or Roundcube headers and set it to ALLOW-FROM your-nextcloud-domain. Be cautious though - this weakens security and is not recommended for public-facing servers.

Yes, and since there is an app that implements this within the Nextcloud structure, the app is the better way to go.

2 Likes

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.