Allow the embed page to be embedded in third party frames
authorTom Hughes <tom@compton.nu>
Wed, 12 Feb 2020 11:18:00 +0000 (11:18 +0000)
committerTom Hughes <tom@compton.nu>
Wed, 12 Feb 2020 11:18:37 +0000 (11:18 +0000)
app/controllers/export_controller.rb

index fc5b0ec80e37eeea2407028dfe517e068554ded3..50aa2a3c96f43838467568b2085c4aa2036fa059 100644 (file)
@@ -24,5 +24,9 @@ class ExportController < ApplicationController
     end
   end
 
-  def embed; end
+  def embed
+    append_content_security_policy_directives(
+      :frame_ancestors => %w[*]
+    )
+  end
 end