Allow rendering iframe from localhost and staging

Have not tested but this is my guess for how to do it.
This commit is contained in:
dan
2024-07-02 18:55:42 +01:00
committed by GitHub
parent 0012c6d40f
commit 14d3ed81f5
+1 -1
View File
@@ -111,9 +111,9 @@ func serve(cctx *cli.Context) error {
e.Use(middleware.SecureWithConfig(middleware.SecureConfig{ e.Use(middleware.SecureWithConfig(middleware.SecureConfig{
ContentTypeNosniff: "nosniff", ContentTypeNosniff: "nosniff",
XFrameOptions: "SAMEORIGIN", XFrameOptions: "SAMEORIGIN",
ContentSecurityPolicy: "frame-ancestors 'self' http://localhost:19006 https://*.bsky.dev",
HSTSMaxAge: 31536000, // 365 days HSTSMaxAge: 31536000, // 365 days
// TODO: // TODO:
// ContentSecurityPolicy
// XSSProtection // XSSProtection
})) }))
e.Use(middleware.LoggerWithConfig(middleware.LoggerConfig{ e.Use(middleware.LoggerWithConfig(middleware.LoggerConfig{