remove X-Frame-Options header on iframe action

NCSU-Libraries · Oct 28, 2016 · 7545031 · 7545031
1 parent 1b18cb1
commit 7545031
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/app/controllers/lentil/application_controller.rb b/app/controllers/lentil/application_controller.rb
@@ -2,5 +2,10 @@ module Lentil
   class ApplicationController < ActionController::Base
     # FIXME: I don't know why the engine isn't using its own application layout like it is supposed to.
     layout "lentil/application"
+
+    private
+    def allow_iframe
+      response.headers.delete "X-Frame-Options"
+    end
   end
-end
+end
diff --git a/app/controllers/lentil/images_controller.rb b/app/controllers/lentil/images_controller.rb
@@ -1,6 +1,7 @@
 module Lentil
   class ImagesController < Lentil::ApplicationController
     include ActionView::Helpers::TextHelper
+    after_filter :allow_iframe, only: [:iframe]
 
     def index
         respond_to do |format|