mirror of
https://github.com/kremalicious/umami.git
synced 2024-11-25 20:02:46 +01:00
Added frame-src to CSP.
This commit is contained in:
parent
5acc1f0f3c
commit
91d385d838
@ -9,6 +9,7 @@ const contentSecurityPolicy = [
|
|||||||
`script-src 'self' 'unsafe-eval' 'unsafe-inline'`,
|
`script-src 'self' 'unsafe-eval' 'unsafe-inline'`,
|
||||||
`style-src 'self' 'unsafe-inline'`,
|
`style-src 'self' 'unsafe-inline'`,
|
||||||
`connect-src 'self' api.umami.is`,
|
`connect-src 'self' api.umami.is`,
|
||||||
|
`frame-src *`,
|
||||||
];
|
];
|
||||||
|
|
||||||
const cspHeader = (values = []) => ({
|
const cspHeader = (values = []) => ({
|
||||||
|
Loading…
Reference in New Issue
Block a user