Added frame-src to CSP.

This commit is contained in:
Mike Cao 2023-11-30 14:54:45 -08:00
parent 5acc1f0f3c
commit 91d385d838

View File

@ -9,6 +9,7 @@ const contentSecurityPolicy = [
`script-src 'self' 'unsafe-eval' 'unsafe-inline'`,
`style-src 'self' 'unsafe-inline'`,
`connect-src 'self' api.umami.is`,
`frame-src *`,
];
const cspHeader = (values = []) => ({