Remove invalid X-Frame-Options: ALLOWALL (#25070)

2025-12-11 06:20:42 +00:00 · 2023-05-23 14:27:17 +02:00
parent 541f64b2bb
commit fea0830614
2 changed files with 2 additions and 2 deletions
--- a/app/controllers/media_controller.rb
+++ b/app/controllers/media_controller.rb
@@ -45,6 +45,6 @@ class MediaController < ApplicationController
  end

  def allow_iframing
-    response.headers['X-Frame-Options'] = 'ALLOWALL'
+    response.headers.delete('X-Frame-Options')
  end
 end