diff options
| -rw-r--r-- | app/controllers/widgets_controller.rb | 1 | ||||
| -rw-r--r-- | spec/controllers/widgets_controller_spec.rb | 5 |
2 files changed, 6 insertions, 0 deletions
diff --git a/app/controllers/widgets_controller.rb b/app/controllers/widgets_controller.rb index 017d3a77f..a529e591b 100644 --- a/app/controllers/widgets_controller.rb +++ b/app/controllers/widgets_controller.rb @@ -9,6 +9,7 @@ require 'securerandom' class WidgetsController < ApplicationController before_filter :check_widget_config, :find_info_request + skip_before_filter :set_x_frame_options_header, :only => [:show] def show medium_cache diff --git a/spec/controllers/widgets_controller_spec.rb b/spec/controllers/widgets_controller_spec.rb index 28f6c1904..80c2d2f26 100644 --- a/spec/controllers/widgets_controller_spec.rb +++ b/spec/controllers/widgets_controller_spec.rb @@ -32,6 +32,11 @@ describe WidgetsController do assigns[:status].should == @info_request.calculate_status end + it 'should not send an x-frame-options header' do + get :show, :request_id => @info_request.id + response.headers["X-Frame-Options"].should be_nil + end + context 'for a non-logged-in user' do context 'if no widget-vote cookie is set' do |