<?php
/**
 * Allow admin pages to load inside Shopify Admin iframe.
 * Include after config.php on any admin script that may be hit directly (including POST handlers).
 */
if (!headers_sent()) {
    header_remove('X-Frame-Options');
    header('Content-Security-Policy: frame-ancestors https://admin.shopify.com https://*.myshopify.com');
}
