IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

REFACTOR: do X-Frame-Options header removal in application controller.

Browse Source 
Co-authored-by: Sam <sam.saffron@gmail.com>
Previous commit: f7084a4339
This commit is contained in:
Vinoth Kannan
2019-12-06 18:25:32 +05:30
parent c88797bf0e
commit e51091f199
3 changed files with 7 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
app/controllers/application_controller.rb
View File

@@ -43,6 +43,7 @@ class ApplicationController < ActionController::Base
after_action :add_readonly_header
after_action :perform_refresh_session
after_action :dont_cache_page
after_action :conditionally_allow_site_embedding
layout :set_layout
@@ -87,6 +88,12 @@ class ApplicationController < ActionController::Base
end
end
def conditionally_allow_site_embedding
if SiteSetting.allow_embedding_site_in_an_iframe
response.headers.delete('X-Frame-Options')
end
end
def set_layout
case request.headers["Discourse-Render"]
when "desktop"