From a6db591ff0ba6e0bbf976590fb0ba620105a61a5 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Wed, 12 Feb 2020 11:18:00 +0000 Subject: [PATCH] Allow the embed page to be embedded in third party frames --- app/controllers/export_controller.rb | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/app/controllers/export_controller.rb b/app/controllers/export_controller.rb index fc5b0ec80..50aa2a3c9 100644 --- a/app/controllers/export_controller.rb +++ b/app/controllers/export_controller.rb @@ -24,5 +24,9 @@ class ExportController < ApplicationController end end - def embed; end + def embed + append_content_security_policy_directives( + :frame_ancestors => %w[*] + ) + end end -- 2.45.1