Skip to content

Commit 77a0f63

Browse files
committed
Allow the app to be embedded in frames
- Disable `frameguard` - Remove CSP `frame-ancestors` restriction
1 parent e240555 commit 77a0f63

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

server.js

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -105,10 +105,11 @@ app.use(
105105
connectSrc: ["'self'", "ws:", "wss:", "https://api.github.com"],
106106
mediaSrc: ["'self'", "https://*.dzcdn.net", "https://*.deezer.com"],
107107
frameSrc: ["'none'"],
108+
frameAncestors: null,
108109
upgradeInsecureRequests: null,
109110
},
110111
},
111-
frameguard: { action: "deny" },
112+
frameguard: false,
112113
}),
113114
);
114115
app.use(express.json({ limit: JSON_BODY_LIMIT }));

0 commit comments

Comments
 (0)