Try allow-from header (limited browser support)

nottinghamtec · Oct 8, 2016 · 3f4c362 · 3f4c362
1 parent 8a838aa
commit 3f4c362
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/PyRIGS/decorators.py b/PyRIGS/decorators.py
@@ -10,7 +10,7 @@ def allow_embed():
     def headers_wrapper(fun):
         def wrapped_function(*args, **kwargs):
             response = fun(*args, **kwargs)
-            response['X-Frame-Options'] = "ALLOW"
+            response['X-Frame-Options'] = "ALLOW-FROM https://forum.nottinghamtec.co.uk/"
             return response
         return wrapped_function
     return headers_wrapper