mirror of
https://github.com/discourse/discourse.git
synced 2025-05-24 00:01:13 +08:00
FIX: Missing variable
This commit is contained in:
@ -25,7 +25,7 @@ class EmbedController < ApplicationController
|
|||||||
|
|
||||||
if !(Rails.env.development? && current_user.try(:admin?))
|
if !(Rails.env.development? && current_user.try(:admin?))
|
||||||
raise Discourse::InvalidAccess.new('embeddable host not set') if SiteSetting.embeddable_host.blank?
|
raise Discourse::InvalidAccess.new('embeddable host not set') if SiteSetting.embeddable_host.blank?
|
||||||
raise Discourse::InvalidAccess.new('invalid referer host') if uri.host != SiteSetting.embeddable_host
|
raise Discourse::InvalidAccess.new('invalid referer host') if URI(request.referer || '').host != SiteSetting.embeddable_host
|
||||||
end
|
end
|
||||||
|
|
||||||
response.headers['X-Frame-Options'] = "ALLOWALL"
|
response.headers['X-Frame-Options'] = "ALLOWALL"
|
||||||
|
Reference in New Issue
Block a user