Only set X-Frame-Options in dev

config/application.rb

@@ -11,10 +11,6 @@ module CodespacesTryRails
     # Initialize configuration defaults for originally generated Rails version.
     config.load_defaults 7.0
 
-    config.action_dispatch.default_headers = {
-      'X-Frame-Options' => 'ALLOW-FROM githubpreview.dev'
-    }
-
     # Configuration for the application, engines, and railties goes here.
     #
     # These settings can be overridden in specific environments using the files

config/environments/development.rb

@@ -59,6 +59,10 @@ Rails.application.configure do
   # Suppress logger output for asset requests.
   config.assets.quiet = true
 
+  config.action_dispatch.default_headers = {
+    'X-Frame-Options' => 'ALLOW-FROM githubpreview.dev'
+  }
+
   # Raises error for missing translations.
   # config.i18n.raise_on_missing_translations = true