Fix X-Frame-Options sameorigin preventing embeds

Created on 12 February 2024, 10 months ago

Embedding H5P content on a website with a different domain results in an error caused by the X-Frame-Options being set to 'sameorigin'.

Try to embed an H5P in a website with a different domain.

Apply the attached patch which removes the X-Frame-Origin header for the h5p.content.embed route.

Review and apply the attached patch.

🐛 Bug report

Status

Needs review

Version

2.0

Component

Code

Created by

🇨🇦Canada shaundychko

Live updates comments and jobs are added and updated live.

Comments & Activities

Production build 0.71.5 2024