fix for X-Frame-Options = SAMEORIGIN, to allow CodeWorkout to be embedded in iframes by LTI consumers

Author: s-edwards

config/application.rb

@@ -40,5 +40,9 @@ class Application < Rails::Application
     config.feedback_timeout_padding = 300
 
     config.active_record.raise_in_transactional_callbacks = true
+
+    # Allow iframe embedding?
+    config.action_dispatch.default_headers.merge!(
+      {'X-Frame-Options' => 'ALLOWALL'})
   end
 end