Allow the embed page to be embedded in third party frames

diff --git a/app/controllers/export_controller.rb b/app/controllers/export_controller.rb
index fc5b0ec80e37eeea2407028dfe517e068554ded3..50aa2a3c96f43838467568b2085c4aa2036fa059 100644 (file)
--- a/app/controllers/export_controller.rb
+++ b/app/controllers/export_controller.rb
@@ -24,5 +24,9 @@ class ExportController < ApplicationController
     end
   end
 
-  def embed; end
+  def embed
+    append_content_security_policy_directives(
+      :frame_ancestors => %w[*]
+    )
+  end
 end