FIX: Missing variable

This commit is contained in:
Robin Ward 2014-01-02 11:55:45 -05:00
parent 46fe78cf8f
commit 15faa01178

View file

@ -25,7 +25,7 @@ class EmbedController < ApplicationController
if !(Rails.env.development? && current_user.try(:admin?))
raise Discourse::InvalidAccess.new('embeddable host not set') if SiteSetting.embeddable_host.blank?
raise Discourse::InvalidAccess.new('invalid referer host') if uri.host != SiteSetting.embeddable_host
raise Discourse::InvalidAccess.new('invalid referer host') if URI(request.referer || '').host != SiteSetting.embeddable_host
end
response.headers['X-Frame-Options'] = "ALLOWALL"