specter/mastodon
1
0
Fork 0
forked from fedi/mastodon
Code Pull requests Activity

Remove invalid X-Frame-Options: ALLOWALL (#25070)

Browse source
This commit is contained in:
Claire 2023-05-23 14:27:17 +02:00 committed by GitHub
parent 541f64b2bb
commit fea0830614
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/media_controller.rb
View file

@ -45,6 +45,6 @@ class MediaController < ApplicationController
end
def allow_iframing
response.headers['X-Frame-Options'] = 'ALLOWALL'
response.headers.delete('X-Frame-Options')
end
end

2
app/controllers/statuses_controller.rb
View file

@ -45,7 +45,7 @@ class StatusesController < ApplicationController
return not_found if @status.hidden? || @status.reblog?
expires_in 180, public: true
response.headers['X-Frame-Options'] = 'ALLOWALL'
response.headers.delete('X-Frame-Options')
render layout: 'embedded'
end