mirror of
https://github.com/GrapheneOS/matrix.grapheneos.org.git
synced 2024-12-20 05:14:37 -05:00
permit frames fetching resources for Element CORP
This commit is contained in:
parent
e1d5caf206
commit
faa1b0a270
@ -141,7 +141,7 @@ http {
|
|||||||
root /srv/element.grapheneos.org;
|
root /srv/element.grapheneos.org;
|
||||||
|
|
||||||
include snippets/security-headers.conf;
|
include snippets/security-headers.conf;
|
||||||
add_header Cross-Origin-Resource-Policy "same-origin" always;
|
add_header Cross-Origin-Resource-Policy "cross-origin" always;
|
||||||
add_header Content-Security-Policy "font-src 'self'; manifest-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'; block-all-mixed-content" always;
|
add_header Content-Security-Policy "font-src 'self'; manifest-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'; block-all-mixed-content" always;
|
||||||
# obsolete and replaced with Content-Security-Policy frame-ancestors 'self'
|
# obsolete and replaced with Content-Security-Policy frame-ancestors 'self'
|
||||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||||
|
Loading…
Reference in New Issue
Block a user