diff --git a/client/server/plugins/embeddable.js b/client/server/plugins/embeddable.js index 72a3c9d..55b026d 100644 --- a/client/server/plugins/embeddable.js +++ b/client/server/plugins/embeddable.js @@ -1,10 +1,14 @@ export default defineNitroPlugin(nitroApp => { nitroApp.hooks.hook('render:response', (response, { event }) => { const routePath = event.node?.req?.url || event.node?.req?.originalUrl + console.log(routePath, !routePath.startsWith('/forms/')) // const routePath= event.context.params._ - if (routePath && !routePath.startsWith('forms/')) { + if (routePath && !routePath.startsWith('/forms/')) { + console.log(response, event) // Only allow embedding of forms response.headers['X-Frame-Options'] = 'sameorigin' } + + delete response.headers['x-powered-by'] }) })