allow iframe requests

2017-04-11 12:19:41 +02:00
parent 341cd3a003
commit 5002f9bbce
1 changed files with 5 additions and 1 deletions
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@ -5,7 +5,7 @@ class ApplicationController < ActionController::Base
  MEMBER_ACTIONS = [:destroy, :edit, :show, :update]

  after_action :verify_authorized, except: [:help, :welcome]
-  before_action :set_locale
+  before_action :set_locale, :allow_iframe_requests
  protect_from_forgery(with: :exception)
  rescue_from Pundit::NotAuthorizedError, with: :render_not_authorized

@ -29,4 +29,8 @@ class ApplicationController < ActionController::Base

  def welcome
  end
+
+  def allow_iframe_requests
+    response.headers.delete('X-Frame-Options')
+  end
 end