Add frame-ancestors to allow remote auth

This commit is contained in:
Caleb James DeLisle
2017-06-07 09:51:10 +02:00
parent 811d031ffd
commit aa9aaefdea
2 changed files with 8 additions and 0 deletions

View File

@@ -45,6 +45,9 @@ module.exports = {
// data: is used by codemirror
"img-src 'self' data: blob:",
// for accounts.cryptpad.fr authentication
"frame-ancestors 'self' accounts.cryptpad.fr",
].join('; '),
// CKEditor requires significantly more lax content security policy in order to function.