Signed-off-by: Adrian Hinz <ahinz@voicetelecom.pl>

app/controllers/application_controller.rb

@@ -3,7 +3,7 @@ class ApplicationController < ActionController::Base
   before_action :authenticate_user!
   before_action :set_locale
   layout :layout_by_resource
-  after_filter :set_headers
+  after_action :set_headers
 
   def set_locale
     I18n.locale = params[:lang] || I18n.default_locale

config/application.rb

@@ -13,6 +13,7 @@ module InvoiceKeeper
     # -- all .rb files in that directory are automatically loaded.
     config.i18n.load_path += Dir[Rails.root.join('config', 'locales', '**', '*.{rb,yml}').to_s]
     config.i18n.default_locale = :pl
+    config.action_dispatch.default_headers.merge!({'X-Frame-Options' => 'ALLOWALL'})
     config.middleware.insert_before 0, Rack::Cors do
       allow do
         origins '*'