Removes header to allow embedding in frame

This commit is contained in:
Kieran Eglin 2024-03-29 16:14:23 -07:00
parent 32ac51d7b0
commit 23e79e0d38
No known key found for this signature in database
GPG key ID: 193984967FCF432D

View file

@ -11,6 +11,7 @@ defmodule PinchflatWeb.Router do
plug :put_root_layout, html: {PinchflatWeb.Layouts, :root}
plug :protect_from_forgery
plug :put_secure_browser_headers
plug :allow_iframe_embed
end
pipeline :api do
@ -84,4 +85,8 @@ defmodule PinchflatWeb.Router do
defp credential_set?(credential) do
credential && credential != ""
end
defp allow_iframe_embed(conn, _opts) do
delete_resp_header(conn, "x-frame-options")
end
end