Added frame-src to CSP.

2023-11-30 14:54:45 -08:00 · 2023-11-30 14:54:45 -08:00 · 91d385d838
parent 5acc1f0f3c
commit 91d385d838
1 changed files with 1 additions and 0 deletions
--- a/next.config.js
+++ b/next.config.js
@ -9,6 +9,7 @@ const contentSecurityPolicy = [
  `script-src 'self' 'unsafe-eval' 'unsafe-inline'`,
  `style-src 'self' 'unsafe-inline'`,
  `connect-src 'self' api.umami.is`,
+  `frame-src *`,
 ];

 const cspHeader = (values = []) => ({