From 426d28d7bcab826263bd87b2e6c56b5c9cc908a6 Mon Sep 17 00:00:00 2001
From: Sora <8521327+SoraKasvgano@users.noreply.github.com>
Date: Tue, 20 Jan 2026 11:18:29 +0800
Subject: [PATCH] Allow iframe embedding for APlayer share pages

Sets the X-Frame-Options header to ALLOWALL in handleAPlayer to permit embedding APlayer share pages in iframes.
---
 server/public/handle_shares.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/server/public/handle_shares.go b/server/public/handle_shares.go
index 9df89eba9..197c789a3 100644
--- a/server/public/handle_shares.go
+++ b/server/public/handle_shares.go
@@ -197,6 +197,9 @@ func (pub *Router) handleAPlayer(w http.ResponseWriter, r *http.Request) {
 		http.Error(w, "Error rendering page", http.StatusInternalServerError)
 		return
 	}
+
+	// Allow embedding in iframes for APlayer share pages
+	w.Header().Set("X-Frame-Options", "ALLOWALL")
 	w.Header().Set("Content-Type", "text/html; charset=utf-8")
 	_, _ = w.Write(buf.Bytes())
 }