Why: * For our partners to be able to open BlockScout in an iframe. * Issue link: n/ah This change addresses the need by: * Creating `AllowIframe` plug. * Editing router to have a new scope for write-only routes and a separate one for read-only routes which allows for iframes (using the plug mentioned above).pull/1168/head
parent
9d620f2530
commit
e7071172e2
@ -0,0 +1,14 @@ |
|||||||
|
defmodule BlockScoutWeb.Plug.AllowIframe do |
||||||
|
@moduledoc """ |
||||||
|
Allows for iframes by deleting the |
||||||
|
[`X-Frame-Options` header](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options) |
||||||
|
""" |
||||||
|
|
||||||
|
alias Plug.Conn |
||||||
|
|
||||||
|
def init(opts), do: opts |
||||||
|
|
||||||
|
def call(conn, _opts) do |
||||||
|
Conn.delete_resp_header(conn, "x-frame-options") |
||||||
|
end |
||||||
|
end |
Loading…
Reference in new issue