Override CSP setting in the embed controller to allow frames

master
Thibaut Girka 6 years ago committed by ThibG
parent e7a72439f1
commit 628fca50e2
  1. 4
      app/controllers/statuses_controller.rb

@ -19,6 +19,10 @@ class StatusesController < ApplicationController
before_action :set_referrer_policy_header, only: [:show] before_action :set_referrer_policy_header, only: [:show]
before_action :set_cache_headers before_action :set_cache_headers
content_security_policy only: :embed do |p|
p.frame_ancestors(false)
end
def show def show
respond_to do |format| respond_to do |format|
format.html do format.html do

Loading…
Cancel
Save