issues with upload/downloading attachments

[jessar94]

Info:
Site: www.supportportalen.mobi
HESK version:: 2.7.3
Mods for HESK Version: 3.0.7
PHP version: 5.6.30 (MySQLi)
MySQL version: 5.5.52 - MariaDB-cll-lve
/hesk_settings.inc.php Exists, Writable
/attachments Exists, Writable
/cache Exists, Writable

My Customer can drag a file and it´s fine to upload but when the Customer click on +Add file , nothing happens.
Same issues from admin side.
i need to click many times and then i can download my attachment/s
In debug mode i get one error:

Notice: Undefined index: autorefresh in /storage/content/79/199979/supportportalen.mobi/public_html/inc/ticket_list.inc.php on line 450

I have also problem with my knowledgebase.
I can't change size of image when i edit articles.

Whats Wrong? :/

[Klemen]

This is a Cross-Origin request being blocked issue (a browser security feature being triggered).

The reason is the help desk is loaded with "www.", but the MfH API is being called without "www." and the browser is blocking it because it respects the "X-Frame-Options: SAMEORIGIN" header (used to prevent "clickjacking" hacks).

You should confirm the issue by opening the help desk without "www." then attachments work fine:
http://supportportalen.mobi/

Fix:

1. temporary: in Hesk settings (Help desk tab > Security) disable the "Frames: Prevent loading HESK in frames on third party domains" setting
2. permanent (for Mike): MfH should use relative URL to call the API so it is always called from the correct (sub)domain

[jessar94]

how can i fix the problem when i edit my articles?
I can't change size of image when i edit articles.
Nothing happens when i click on the img, that worked before, then i upgrade to last v of hesk and mods for hesk, with no error.

[mkoch227]

I personally have never used the image resize function in the editor; however I was able to get the resize handles to appear by highlighting the image.