Contents

# frozen_string_literal: true

module Decidim
  class WidgetsController < Decidim::ApplicationController
    skip_authorization_check only: :show
    skip_before_action :verify_authenticity_token
    after_action :allow_iframe, only: :show
    helper ResourceHelper

    layout "decidim/widget"

    helper_method :model, :iframe_url, :current_participatory_space

    def show
      respond_to do |format|
        format.js { render "decidim/widgets/show" }
        format.html
      end
    end

    private

    def current_participatory_space
      @current_participatory_space ||= model.component.participatory_space
    end

    def iframe_url
      raise NotImplementedError
    end

    def allow_iframe
      response.headers.delete "X-Frame-Options"
    end
  end
end

Version data entries

3 entries across 3 versions & 1 rubygems

Version	Path
decidim-core-0.11.2	app/controllers/decidim/widgets_controller.rb
decidim-core-0.11.1	app/controllers/decidim/widgets_controller.rb
decidim-core-0.11.0.pre1	app/controllers/decidim/widgets_controller.rb