Ruby on rails 4 app does not work in iframe

by

This has to do with Rails 4 enabling additional security protocols by default: http://weblog.rubyonrails.org/2013/2/25/Rails-4-0-beta1/

The setting that breaks iFrames on remote sites is X-Frame-Options. By default, this is set to SAMEORIGIN, which prevents the content from being loading cross domain:

config.action_dispatch.default_headers = {
    'X-Frame-Options' => 'SAMEORIGIN'
}

You can read about the new default headers here:
http://edgeguides.rubyonrails.org/security.html#default-headers

In order to allow the iFrame to work cross domain, you can change the default headers to allow X-Frame across domain.

config.action_dispatch.default_headers = {
    'X-Frame-Options' => 'ALLOWALL'
}

More Related Contents:

  1. How to get a random number in Ruby
  2. Rails update_attributes without save?
  3. How to integrate a Wrap Bootstrap theme into an Rails application?
  4. Is the server running on host “localhost” (::1) and accepting TCP/IP connections on port 5432?
  5. No route matches “/users/sign_out” devise rails 3
  6. Build vs new in Rails 3
  7. Disable ActiveRecord for Rails 4
  8. ActiveRecord OR query Hash notation
  9. Rails DB Migration – How To Drop a Table?
  10. Rails 3: Get Random Record
  11. Setting session timeout in Rails 3
  12. Devise form within a different controller
  13. Is it possible to set ENV variables for rails development environment in my code?
  14. Devise limit one session per user at a time
  15. Rails 4: organize rails models in sub path without namespacing models?
  16. GroupingError: ERROR: column must appear in the GROUP BY clause or be used in an aggregate function
  17. Rails 4 nested attributes and has_many :through associaton in a form
  18. Using Rails link_to for links that post
  19. Rails 3 disabling session cookies
  20. Rails naming convention for join table
  21. simple hit counter for page views in rails
  22. Rails 3 check if attribute changed
  23. Access helpers from mailer?
  24. How do I extract Rails view helpers into a gem?
  25. How to make Devise redirect after confirmation
  26. Is puma the ONLY multi-threaded rails 4 http server?
  27. Rails devise: user_signed_in? not working
  28. rails 3 has_many :through Form with checkboxes
  29. Customizing Devise error messages in Rails 3?
  30. An error occurred while installing pg (0.17.1), and Bundler cannot continue

Leave a Comment