Add frame-ancestors directive to CSP (#4111)

Signed-off-by: Sergio Castaño Arteaga <tegioz@icloud.com>
artifacthub · Oct 22, 2024 · 73e5cb0 · 73e5cb0
1 parent 53228a9
commit 73e5cb0
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/internal/handlers/static/handlers.go b/internal/handlers/static/handlers.go
@@ -32,7 +32,8 @@ const (
 	img-src 'self' data: https:;
 	manifest-src 'self';
 	script-src 'self' https://www.google-analytics.com;
-	style-src 'self' 'unsafe-inline'
+	style-src 'self' 'unsafe-inline';
+	frame-ancestors 'none';
 	`
 
 	indexCacheMaxAge = 5 * time.Minute