Contents

# frozen_string_literal: true

module ShopifyApp
  module FrameAncestors
    extend ActiveSupport::Concern

    included do
      content_security_policy do |policy|
        policy.frame_ancestors(-> do
          domain_host = current_shopify_domain || "*.#{::ShopifyApp.configuration.myshopify_domain}"
          [
            "#{ShopifyAPI::Context.host_scheme}://#{domain_host}",
            "https://admin.#{::ShopifyApp.configuration.unified_admin_domain}",
          ]
        end)
      end
    end
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
shopify_app-22.5.1	lib/shopify_app/controller_concerns/frame_ancestors.rb