shopify_app 8.2.1 → 8.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: d1f97ef76b99ee420d03be252ee3e7afb91f9ecd
-  data.tar.gz: cd48c126d28a75212a44647317aed7b8a63b632b
+  metadata.gz: 93440d005afce88a4646870516c40726b913cd0f
+  data.tar.gz: 5a7731dba7c7b5137260482d8dc6e9e54390b47f
 SHA512:
-  metadata.gz: 60c658b34b6d6d1569b5ad624870dc2d0a22b0f3668d6d582e0e82fd927c58371e3a31056fbaedb4853aae84145492bddfceedb92b4360619028d45fcf17ca74
-  data.tar.gz: 6b4b21362296c42e3940dbf572fce7da5f6746ef49385419f4e7a084ea8d7f500f97b2cfd548b1d9d167384f0441a52361270a53fc2790d746239a6f4d5dd1fa
+  metadata.gz: 989f10667b7db17df7836a1c7fcff04b6ed6fa26f6c6e23580d1905d02e1e4badd1c676da3b476b367ac9c9ee2c86d2dcfe3ceb08878eb308fa0f3fba471b3ef
+  data.tar.gz: 4324ad1083d794cf274275bb7064226dee041f9fd384d2c904f0bc178d47b61da97a01f26b2aac52976f47a59f336fbcc1e67d5ed5473a54a37be08e44395344

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+8.2.2
+-----
+* Changes how the ESDK concern allows iframes. Fixes an issue with the first request for some people
+
 8.2.1
 -----
 * Bugfix: Don't logout shops from `login_again_if_different_shop` when Rails

data/lib/shopify_app/controller_concerns/embedded_app.rb

@@ -13,7 +13,7 @@ module ShopifyApp
 
     def set_esdk_headers
       response.set_header('P3P', 'CP="Not used"')
-      response.default_headers.delete('X-Frame-Options')
+      response.headers.except!('X-Frame-Options')
     end
   end
 end

data/lib/shopify_app/utils.rb

@@ -7,7 +7,7 @@ module ShopifyApp
       name.sub!(%r|https?://|, '')
 
       u = URI("http://#{name}")
-      u.host && u.host.ends_with?(".#{ShopifyApp.configuration.myshopify_domain}") ? u.host : nil
+      u.host if u.host&.match(/^[a-z0-9][a-z0-9\-]*[a-z0-9]\.#{Regexp.escape(ShopifyApp.configuration.myshopify_domain)}$/)
     rescue URI::InvalidURIError
       nil
     end

data/lib/shopify_app/version.rb

@@ -1,3 +1,3 @@
 module ShopifyApp
-  VERSION = '8.2.1'
+  VERSION = '8.2.2'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: shopify_app
 version: !ruby/object:Gem::Version
-  version: 8.2.1
+  version: 8.2.2
 platform: ruby
 authors:
 - Shopify
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-09-28 00:00:00.000000000 Z
+date: 2017-10-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails