From 8eabec0a51a26a91d1d14052d856f435bb0b652a Mon Sep 17 00:00:00 2001
From: Jesse Vickery <jesse.vickery@tbs-sct.gc.ca>
Date: Fri, 19 Dec 2025 16:05:12 +0000
Subject: [PATCH 1/2] removal(templates): resource view embed;

- Remoed resource view ember button and modal.
---
 .../package/snippets/resource_view.html       | 35 ++-----------------
 1 file changed, 2 insertions(+), 33 deletions(-)

diff --git a/ckan/templates/package/snippets/resource_view.html b/ckan/templates/package/snippets/resource_view.html
index 3f7785f9f7c..84f16e3102f 100644
--- a/ckan/templates/package/snippets/resource_view.html
+++ b/ckan/templates/package/snippets/resource_view.html
@@ -12,15 +12,7 @@
       <i class="fa fa-arrows-alt"></i>
       {{ _("Fullscreen") }}
     </a>
-    {# (canada fork only): non-qualified URIs #}
-    <a class="btn btn-default"
-       href="#embed-{{ resource_view['id'] }}"
-       data-module="resource-view-embed"
-       data-module-id="{{ resource_view['id'] }}"
-       data-module-url="{{ h.url_for('resource_view', id=package['name'], resource_id=resource['id'], view_id=resource_view['id'], qualified=false) }}">
-      <i class="fa fa-code"></i>
-      {{ _("Embed") }}
-    </a>
+    {# (canada fork only): remove embed dur to X-Frame-Options:SAMEORIGIN #}
   </div>
   {% block description %}
     <p class="desc">{{ h.render_markdown(resource_view['description']) }}</p>
@@ -72,29 +64,6 @@
         </iframe>
       {% endif %}
     </div>
-    <div id="embed-{{ resource_view['id'] }}" class="modal fade resource-view-embed">
-      <div class="modal-dialog">
-    <div class="modal-content">
-
-      <div class="modal-header">
-        <h3 class="modal-title">{{ _("Embed resource view") }}</h3>
-        <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="{{ _('Close') }}"></button>
-
-      </div>
-      <div class="modal-body">
-        <p class="embed-content">{{ _("You can copy and paste the embed code into a CMS or blog software that supports raw HTML") }}</p>
-        <div class="row">
-          <div class="col-md-6">
-            {{ form.input("width", label=_("Width"), value=700, classes=["control-full"]) }}
-          </div>
-          <div class="col-md-6">
-            {{ form.input("height", label=_("Height"), value=400, classes=["control-full"]) }}
-          </div>
-        </div>
-        {{ form.textarea("code", label=_("Code"), value="", classes=["pre"], rows=3) }}
-      </div>
-      </div>
-      </div>
-    </div>
+    {# (canada fork only): remove embed dur to X-Frame-Options:SAMEORIGIN #}
   </div>
 {% endblock %}

From 4f3a8614d9919bbd734b198b936cac1e69730557 Mon Sep 17 00:00:00 2001
From: Jesse Vickery <jesse.vickery@tbs-sct.gc.ca>
Date: Fri, 19 Dec 2025 16:10:08 +0000
Subject: [PATCH 2/2] feat(misc): changelog;

- Added change log file.
---
 changes/216.canada.removal | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 changes/216.canada.removal

diff --git a/changes/216.canada.removal b/changes/216.canada.removal
new file mode 100644
index 00000000000..8c4beb84758
--- /dev/null
+++ b/changes/216.canada.removal
@@ -0,0 +1 @@
+Removed the Resource View embed button and modal due to `X-Frame-Options: SAMEORIGIN` security requirement preventing embeds.
\ No newline at end of file