Minor fine-tuning related to how we allow iframes to use the public booking page.

alextselegidis · alextselegidis · commit bc1a47f39e14 · 2026-05-28T16:53:23.000+02:00
diff --git a/application/config/routes.php b/application/config/routes.php
@@ -73,7 +73,7 @@
 |
 */
 
-// header('X-Frame-Options: SAMEORIGIN');
+header('X-Frame-Options: SAMEORIGIN');
 
 /*
 | -------------------------------------------------------------------------
diff --git a/application/controllers/Booking.php b/application/controllers/Booking.php
@@ -127,6 +127,8 @@ public function index(): void
             return;
         }
 
+        header('X-Frame-Options: ALLOWALL'); // We need this for iframe integrations.
+
         $company_name = setting('company_name');
         $company_logo = setting('company_logo');
         $company_color = setting('company_color');

Original file line number	Diff line number	Diff line change
`@@ -73,7 +73,7 @@`
`73`	`73`	`\|`
`74`	`74`	`*/`
`75`	`75`
`76`		`-// header('X-Frame-Options: SAMEORIGIN');`
	`76`	`+header('X-Frame-Options: SAMEORIGIN');`
`77`	`77`
`78`	`78`	`/*`
`79`	`79`	`\| -------------------------------------------------------------------------`
Original file line number	Diff line number	Diff line change
`@@ -127,6 +127,8 @@ public function index(): void`
`127`	`127`	`return;`
`128`	`128`	`}`
`129`	`129`
	`130`	`+ header('X-Frame-Options: ALLOWALL'); // We need this for iframe integrations.`
	`131`	`+`
`130`	`132`	`$company_name = setting('company_name');`
`131`	`133`	`$company_logo = setting('company_logo');`
`132`	`134`	`$company_color = setting('company_color');`