alphagov/rummager — pull request #7 by JordanHatch (2012-07-05 14:55:12+00:00)
Title: Exclude frame options from Rack::Protection

Right now we can't load any browse pages inside frames due to Rack::Protection sending the X-Frame-Options header, which is causing havoc in Review-o-matic. This commit should fix this.

Note we have to specify to also exclude "escaped_params" here as we're overriding the Sinatra default.