Fix URL for embeddable middleware
This commit is contained in:
5
client/server/plugins/embeddable.js
vendored
5
client/server/plugins/embeddable.js
vendored
@@ -1,7 +1,8 @@
|
||||
export default defineNitroPlugin(nitroApp => {
|
||||
nitroApp.hooks.hook('render:response', (response, { event }) => {
|
||||
const routePath= event.context.params._
|
||||
if (!routePath.startsWith('forms/')) {
|
||||
const routePath = event.node?.req?.url || event.node?.req?.originalUrl
|
||||
// const routePath= event.context.params._
|
||||
if (routePath && !routePath.startsWith('forms/')) {
|
||||
// Only allow embedding of forms
|
||||
response.headers['X-Frame-Options'] = 'sameorigin'
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user