dont return SAMEORIGIN twice

alexjustesen · Nov 12, 2023 · 299e163 · 299e163
1 parent d92a1ec
commit 299e163
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/app/Http/Middleware/FrameAllowOptions.php b/app/Http/Middleware/FrameAllowOptions.php
@@ -17,7 +17,9 @@ public function handle(Request $request, Closure $next): Response
     {
         $response = $next($request);
 
-        $response->header('X-Frame-Options', 'ALLOW-FROM '.config('speedtest.allow_embeds'));
+        if (! blank(config('speedtest.allow_embeds'))) {
+            $response->header('X-Frame-Options', 'ALLOW-FROM '.config('speedtest.allow_embeds'));
+        }
 
         return $response;
     }

diff --git a/config/speedtest.php b/config/speedtest.php
@@ -27,5 +27,5 @@
     /**
      * Security
      */
-    'allow_embeds' => env('ALLOW_EMBEDS', 'SAMEORIGIN'),
+    'allow_embeds' => env('ALLOW_EMBEDS', null),
 ];