mirror of
https://github.com/kremalicious/umami.git
synced 2024-11-25 20:02:46 +01:00
Added frame-src to CSP.
This commit is contained in:
parent
5acc1f0f3c
commit
91d385d838
@ -9,6 +9,7 @@ const contentSecurityPolicy = [
|
||||
`script-src 'self' 'unsafe-eval' 'unsafe-inline'`,
|
||||
`style-src 'self' 'unsafe-inline'`,
|
||||
`connect-src 'self' api.umami.is`,
|
||||
`frame-src *`,
|
||||
];
|
||||
|
||||
const cspHeader = (values = []) => ({
|
||||
|
Loading…
Reference in New Issue
Block a user