diff --git a/config/application.rb b/config/application.rb index d5384249..226f4313 100644 --- a/config/application.rb +++ b/config/application.rb @@ -36,5 +36,8 @@ class Application < Rails::Application # Middleware like session, flash, cookies can be added back manually. # Skip views, helpers and assets when generating a new resource. config.api_only = true + + # Remove X-Frame-Options header to allow iframe embeds + config.action_dispatch.default_headers.delete('X-Frame-Options') end end