remove X-Frame-Options header on iframe action

bretdavidson · bretdavidson · commit 754503102b54 · 2016-10-28T08:03:43.000-04:00
diff --git a/app/controllers/lentil/application_controller.rb b/app/controllers/lentil/application_controller.rb
@@ -2,5 +2,10 @@ module Lentil
   class ApplicationController < ActionController::Base
     # FIXME: I don't know why the engine isn't using its own application layout like it is supposed to.
     layout "lentil/application"
+
+    private
+    def allow_iframe
+      response.headers.delete "X-Frame-Options"
+    end
   end
-end
+end
diff --git a/app/controllers/lentil/images_controller.rb b/app/controllers/lentil/images_controller.rb
@@ -1,6 +1,7 @@
 module Lentil
   class ImagesController < Lentil::ApplicationController
     include ActionView::Helpers::TextHelper
+    after_filter :allow_iframe, only: [:iframe]
 
     def index
         respond_to do |format|
