From 2b989f49eaaa1674f8a47f9fb6dc2ddeabc85a25 Mon Sep 17 00:00:00 2001 From: Maikel Linke Date: Wed, 20 Sep 2017 15:20:42 +1000 Subject: [PATCH] Enable iframes in development environment --- app/controllers/application_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index 001805928f..b241dede09 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -57,7 +57,7 @@ class ApplicationController < ActionController::Base def enable_embedded_shopfront whitelist = Spree::Config[:embedded_shopfronts_whitelist] return unless Spree::Config[:enable_embedded_shopfronts] && whitelist.present? - return if request.referer && URI(request.referer).scheme != 'https' && !Rails.env.test? + return if request.referer && URI(request.referer).scheme != 'https' && !Rails.env.test? && !Rails.env.development? response.headers.delete 'X-Frame-Options' response.headers['Content-Security-Policy'] = "frame-ancestors #{whitelist}"