Remove invalid X-Frame-Options: ALLOWALL (#25070)

2023-05-23 14:27:17 +02:00 · 2023-05-23 14:27:17 +02:00 · fea0830614
commit fea0830614
parent 541f64b2bb
2 changed files with 2 additions and 2 deletions
--- a/app/controllers/media_controller.rb
+++ b/app/controllers/media_controller.rb
@ -45,6 +45,6 @@ class MediaController < ApplicationController
  end

  def allow_iframing
-    response.headers['X-Frame-Options'] = 'ALLOWALL'
+    response.headers.delete('X-Frame-Options')
  end
 end