module BetterFrameable
Constants
- FALLBACK_ORIGIN_MESSAGE
Private Instance Methods
set_headers()
click to toggle source
# File lib/better_frame/better_frameable.rb, line 14 def set_headers headers['Access-Control-Allow-Origin'] = ENV.fetch("BETTER_FRAME_ORIGIN", FALLBACK_ORIGIN_MESSAGE) headers['Access-Control-Allow-Credentials'] = "true" headers['Access-Control-Allow-Methods'] = 'POST, GET, PUT, DELETE, OPTIONS' headers['Access-Control-Allow-Headers'] = 'Origin, Content-Type, Accept, Authorization, Token' headers['Access-Control-Max-Age'] = "1728000" end