Why: * For our partners to be able to open BlockScout in an iframe. * Issue link: n/ah This change addresses the need by: * Creating `AllowIframe` plug. * Editing router to have a new scope for write-only routes and a separate one for read-only routes which allows for iframes (using the plug mentioned above).pull/1168/head
parent
9d620f2530
commit
e7071172e2
@ -0,0 +1,14 @@ |
||||
defmodule BlockScoutWeb.Plug.AllowIframe do |
||||
@moduledoc """ |
||||
Allows for iframes by deleting the |
||||
[`X-Frame-Options` header](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options) |
||||
""" |
||||
|
||||
alias Plug.Conn |
||||
|
||||
def init(opts), do: opts |
||||
|
||||
def call(conn, _opts) do |
||||
Conn.delete_resp_header(conn, "x-frame-options") |
||||
end |
||||
end |
Loading…
Reference in new issue