- def start
- render :update do |page|
- page.replace_html :sidebar_title, 'Export'
- page.replace_html :sidebar_content, :partial => 'start'
- page.call "openSidebar"
- end
+ before_action :authorize_web
+ before_action :set_locale
+ before_action :update_totp, :only => [:finish]
+ authorize_resource :class => false
+
+ content_security_policy(:only => :embed) do |policy|
+ policy.frame_ancestors("*")