From 58938645eb1c1ee0fc3cb586fe04dedb266c85eb Mon Sep 17 00:00:00 2001 From: sumarsono Date: Tue, 14 Jan 2025 08:24:12 +0000 Subject: [PATCH] fix(csp): frame-ancestors directive is not supported in the element Ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors Signed-off-by: sumarsono --- config.toml | 1 - 1 file changed, 1 deletion(-) diff --git a/config.toml b/config.toml index 92e5fe8..30687bd 100644 --- a/config.toml +++ b/config.toml @@ -175,7 +175,6 @@ csp = [ { directive = "style-src", domains = ["'self'", "'unsafe-inline'"] }, { directive = "frame-src", domains = ["https://player.vimeo.com", "https://www.youtube-nocookie.com", "https://toot.community"] }, { directive = "connect-src", domains = ["https://toot.community"] }, - { directive = "frame-ancestors", domains = ["'none'"] }, { directive = "base-uri", domains = ["'none'"] }, { directive = "form-action", domains = ["'none'"] } ]