Remove invalid X-Frame-Options: ALLOWALL (#25070)

2023-05-23 14:27:17 +02:00
parent b1ac3562df
commit 72d96bf17a
2 changed files with 2 additions and 2 deletions
--- a/app/controllers/statuses_controller.rb
+++ b/app/controllers/statuses_controller.rb
@@ -43,7 +43,7 @@ class StatusesController < ApplicationController
    return not_found if @status.hidden? || @status.reblog?

    expires_in 180, public: true
-    response.headers['X-Frame-Options'] = 'ALLOWALL'
+    response.headers.delete('X-Frame-Options')

    render layout: 'embedded'
  end