gearheads
/
mastodon
Archived
2
0
Fork 0
Code Releases 4 Activity

Remove invalid X-Frame-Options: ALLOWALL (#25070)

gh/stable
Claire 2023-05-23 14:27:17 +02:00
parent b1ac3562df
commit 72d96bf17a
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/controllers/media_controller.rb
View File

@ -46,6 +46,6 @@ class MediaController < ApplicationController
end end
def allow_iframing def allow_iframing
response.headers['X-Frame-Options'] = 'ALLOWALL' response.headers.delete('X-Frame-Options')
end end
end end

2
app/controllers/statuses_controller.rb
View File

@ -43,7 +43,7 @@ class StatusesController < ApplicationController
return not_found if @status.hidden? || @status.reblog? return not_found if @status.hidden? || @status.reblog?
expires_in 180, public: true expires_in 180, public: true
response.headers['X-Frame-Options'] = 'ALLOWALL' response.headers.delete('X-Frame-Options')
render layout: 'embedded' render layout: 'embedded'
end end