Remove redundant frame ancestors log from middleware

paskal · umputun · commit bc612ddf8192 · 2025-12-04T11:15:06.000-06:00
The log message was printed on every request when allowed ancestors
were configured, creating unnecessary noise in the logs.
diff --git a/backend/app/rest/api/rest.go b/backend/app/rest/api/rest.go
@@ -628,7 +628,6 @@ func securityHeadersMiddleware(imageProxyEnabled bool, allowedAncestors []string
 			}
 			frameAncestors := "*"
 			if len(allowedAncestors) > 0 {
-				log.Printf("[INFO] frame embedding allowed from %+v only", allowedAncestors)
 				frameAncestors = strings.Join(allowedAncestors, " ")
 			}
 			w.Header().Set("Content-Security-Policy", fmt.Sprintf("default-src 'none'; base-uri 'none'; form-action 'none'; connect-src 'self'; frame-src 'self' mailto:; img-src %s; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src data:; object-src 'none'; frame-ancestors %s;", imgSrc, frameAncestors))

Original file line number	Diff line number	Diff line change
`@@ -628,7 +628,6 @@ func securityHeadersMiddleware(imageProxyEnabled bool, allowedAncestors []string`
`628`	`628`	`}`
`629`	`629`	`frameAncestors := "*"`
`630`	`630`	`if len(allowedAncestors) > 0 {`
`631`		`- log.Printf("[INFO] frame embedding allowed from %+v only", allowedAncestors)`
`632`	`631`	`frameAncestors = strings.Join(allowedAncestors, " ")`
`633`	`632`	`}`
`634`	`633`	`w.Header().Set("Content-Security-Policy", fmt.Sprintf("default-src 'none'; base-uri 'none'; form-action 'none'; connect-src 'self'; frame-src 'self' mailto:; img-src %s; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src data:; object-src 'none'; frame-ancestors %s;", imgSrc, frameAncestors))`