It looks like a few things have changed over the last few months and `headers["X-Frame-Options"] = "allowall"` does not seem to be working anymore with recent browsers.

I found this Stackoverflow article about the topic https://stackoverflow.com/questions/67561924/ruby-on-rails-allow-embedding-of-your-website-in-other-sites-using-frame-ancesto and it appears that the "new" way of doing it is by overloading a Content Security Policy.

I ended up with the following content_security_policy.rb file

You can also decide to not override the property on a case by case (controller level).

I still have one issue: making it work with nested routes

the render template code in the example does not seem to be working as the URL is events/:event_id/questions :-(
But I will get something working at some point.
Cheers

I still have issues in my project getting the id properly working. We are using UUIDs and not  integer increments in our Postgres database. Could that be the issue? I eventually have to create the id and pass it to the different models ... so not that convenient.

Any idea why?

Have you tried https://github.com/andreibondarev/langchainrb or https://github.com/BoxcarsAI/boxcars for this type of application? Which one do you prefer?

  Bashar , you're welcome

Improving the code for the setPreferredVoices function:

const preferredVoice = this.preferredVoices
  .map(name => voices.find(v => v.name === name))
  .find(Boolean);

if (preferredVoice) {
  Object.assign(this.utterance, {
    voice: preferredVoice,
    lang: preferredVoice.lang
  });
  console.log(`Selected voice: ${preferredVoice.name}`, `Selected lang: ${preferredVoice.lang}`);
}

it looks like Claude, Meta and O1-mini are all in agreement with this code ;-)