Changeset 834bcc3 in Klonkt for src/routes/embed.js
- Timestamp:
- 06/23/2026 06:14:27 PM (3 months ago)
- Branches:
- main
- Children:
- d774679
- Parents:
- bb42dfb
- File:
-
- 1 edited
-
src/routes/embed.js (modified) (2 diffs)
Legend:
- Unmodified
- Added
- Removed
-
src/routes/embed.js
rbb42dfb r834bcc3 1 1 /** 2 * Embed bare player (premium feature #7).2 * Embeddable player (premium feature #7). 3 3 * 4 * GET /embed -> een zelfstandige, compacte audiospeler-pagina (geenshell),5 * bedoeld om op EXTERNE sites in een <iframe> te zetten.4 * GET /embed -> a standalone, compact audio player page (no shell), 5 * intended to be placed in an <iframe> on EXTERNAL sites. 6 6 * 7 * De pagina wordt door ons (klonkt-origin) geserveerd, dus de audio-requests vanuit8 * het iframe blijven same-origin → de /audio/stream-gate laat ze door, ook al staat9 * het iframe op een vreemde site. We overrulen alleen Helmet's frameguard +10 * frame-ancestors zodat externe sites mógen inbedden. Hub: /user/:slug/embed.7 * The page is served by us (klonkt-origin), so audio requests from within 8 * the iframe remain same-origin → the /audio/stream gate lets them through, 9 * even when the iframe is on a foreign site. We only override Helmet's frameguard 10 * + frame-ancestors so that external sites are allowed to embed us. Hub: /user/:slug/embed. 11 11 */ 12 12 … … 21 21 if (!site) return next(); 22 22 23 // Inbedden op externe sites toestaan (overrule de globaleframeguard/CSP).23 // Allow embedding on external sites (override the global frameguard/CSP). 24 24 res.removeHeader('X-Frame-Options'); 25 25 res.setHeader(
Note:
See TracChangeset
for help on using the changeset viewer.
![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png)