fix: allow PDF iframe embedding in CSP

2026-03-27 21:41:06 +01:00
parent 8396a75223
commit 1a992b7b4e
1 changed files with 2 additions and 1 deletions
--- a/server/src/index.ts
+++ b/server/src/index.ts
@@ -58,7 +58,8 @@ app.use(helmet({
      connectSrc: ["'self'", "ws:", "wss:", "https:", "http:"],
      fontSrc: ["'self'", "https://fonts.gstatic.com", "data:"],
      objectSrc: ["'self'"],
-      frameAncestors: ["'none'"],
+      frameSrc: ["'self'"],
+      frameAncestors: ["'self'"],
    }
  },
  crossOriginEmbedderPolicy: false,