fix: allow PDF iframe embedding in CSP
This commit is contained in:
@@ -58,7 +58,8 @@ app.use(helmet({
|
|||||||
connectSrc: ["'self'", "ws:", "wss:", "https:", "http:"],
|
connectSrc: ["'self'", "ws:", "wss:", "https:", "http:"],
|
||||||
fontSrc: ["'self'", "https://fonts.gstatic.com", "data:"],
|
fontSrc: ["'self'", "https://fonts.gstatic.com", "data:"],
|
||||||
objectSrc: ["'self'"],
|
objectSrc: ["'self'"],
|
||||||
frameAncestors: ["'none'"],
|
frameSrc: ["'self'"],
|
||||||
|
frameAncestors: ["'self'"],
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
crossOriginEmbedderPolicy: false,
|
crossOriginEmbedderPolicy: false,
|
||||||
|
|||||||
Reference in New Issue
Block a user