module BetterFrameable

Constants

FALLBACK_ORIGIN_MESSAGE

Private Instance Methods

set_headers() click to toggle source
# File lib/better_frame/better_frameable.rb, line 14
def set_headers
  headers['Access-Control-Allow-Origin'] = ENV.fetch("BETTER_FRAME_ORIGIN", FALLBACK_ORIGIN_MESSAGE)
  headers['Access-Control-Allow-Credentials'] = "true"
  headers['Access-Control-Allow-Methods'] = 'POST, GET, PUT, DELETE, OPTIONS'
  headers['Access-Control-Allow-Headers'] = 'Origin, Content-Type, Accept, Authorization, Token'
  headers['Access-Control-Max-Age'] = "1728000"
end