Remove invalid X-Frame-Options: ALLOWALL (mastodon#25070)

ClearlyClaire · Jun 21, 2023 · 9bbec69 · 9bbec69
1 parent 7ff69de
commit 9bbec69
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/app/controllers/media_controller.rb b/app/controllers/media_controller.rb
@@ -46,6 +46,6 @@ def check_playable
   end
 
   def allow_iframing
-    response.headers['X-Frame-Options'] = 'ALLOWALL'
+    response.headers.delete('X-Frame-Options')
   end
 end
diff --git a/app/controllers/statuses_controller.rb b/app/controllers/statuses_controller.rb
@@ -43,7 +43,7 @@ def embed
     return not_found if @status.hidden? || @status.reblog?
 
     expires_in 180, public: true
-    response.headers['X-Frame-Options'] = 'ALLOWALL'
+    response.headers.delete('X-Frame-Options')
 
     render layout: 'embedded'
   end