Fix #11969
@ -10,6 +10,7 @@ class AccountsController < ApplicationController
before_action :set_body_classes
skip_around_action :set_locale, if: -> { request.format == :json }
skip_before_action :require_functional!
def show
respond_to do |format|
@ -2,6 +2,7 @@
class CustomCssController < ApplicationController
skip_before_action :store_current_location
before_action :set_cache_headers
@ -9,6 +9,8 @@ class DirectoriesController < ApplicationController
before_action :set_tag, only: :show
before_action :set_accounts
def index
render :index
end
@ -8,6 +8,7 @@ class FollowerAccountsController < ApplicationController
@ -8,6 +8,7 @@ class FollowingAccountsController < ApplicationController
class ManifestsController < ApplicationController
expires_in 3.minutes, public: true
@ -4,6 +4,7 @@ class MediaController < ApplicationController
include Authorization
before_action :authenticate_user!, if: :whitelist_mode?
before_action :set_media_attachment
@ -4,6 +4,7 @@ class MediaProxyController < ApplicationController
include RoutingHelper
@ -7,6 +7,8 @@ class RemoteFollowController < ApplicationController
def new
@remote_follow = RemoteFollow.new(session_params)
@ -10,6 +10,8 @@ class RemoteInteractionController < ApplicationController
before_action :set_status
@ -19,6 +19,7 @@ class StatusesController < ApplicationController
before_action :set_autoplay, only: :embed
skip_before_action :require_functional!, only: [:show, :embed]
content_security_policy only: :embed do |p|
p.frame_ancestors(false)
@ -13,6 +13,8 @@ class TagsController < ApplicationController
before_action :set_instance_presenter
format.html do