search

cyu / rack-cors

Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
MIT License
3.26k stars 263 forks source link

Documentation for the frame-ancestors directive? #273

Open shellandbull opened 5 months ago

shellandbull commented 5 months ago

Hello there!

The frame-ancestors CSP directive has replaced the header X-Frame-Options

I'm afraid I can't see any examples of this on Rack::Cors and I'm currently trying to make an <iframe> work on my Rails App.

Could we please add examples to the docs?