Added frame-src to CSP.

This commit is contained in:
Mike Cao 2023-11-30 14:54:45 -08:00
parent 5acc1f0f3c
commit 91d385d838

View File

@ -9,6 +9,7 @@ const contentSecurityPolicy = [
`script-src 'self' 'unsafe-eval' 'unsafe-inline'`, `script-src 'self' 'unsafe-eval' 'unsafe-inline'`,
`style-src 'self' 'unsafe-inline'`, `style-src 'self' 'unsafe-inline'`,
`connect-src 'self' api.umami.is`, `connect-src 'self' api.umami.is`,
`frame-src *`,
]; ];
const cspHeader = (values = []) => ({ const cspHeader = (values = []) => ({