From 1cd0c9043dc75b0c3a20962ba0edc2213d8d9df8 Mon Sep 17 00:00:00 2001 From: rare-magma Date: Thu, 18 Jan 2024 22:12:05 +0100 Subject: [PATCH] refactor: replace x-frame-options with CSP frame-ancestors Signed-off-by: rare-magma --- public/_headers | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/public/_headers b/public/_headers index 030c5f54..61995718 100644 --- a/public/_headers +++ b/public/_headers @@ -1,8 +1,7 @@ /* - X-Frame-Options: DENY Referrer-Policy: no-referrer Permissions-Policy: accelerometer=(), autoplay=(self), camera=(), display-capture=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(), payment=(), picture-in-picture=(self), sync-xhr=(), usb=() - Content-Security-Policy: default-src 'self'; img-src https://guitos.app https://www.w3.org data:; + Content-Security-Policy: default-src 'self'; img-src https://guitos.app https://www.w3.org data:; frame-ancestors 'none'; https://guitos.pages.dev/* X-Robots-Tag: noindex \ No newline at end of file