Allow rendering iframe from localhost and staging
Have not tested but this is my guess for how to do it.
This commit is contained in:
@@ -109,11 +109,11 @@ func serve(cctx *cli.Context) error {
|
|||||||
|
|
||||||
// SECURITY: Do not modify without due consideration.
|
// SECURITY: Do not modify without due consideration.
|
||||||
e.Use(middleware.SecureWithConfig(middleware.SecureConfig{
|
e.Use(middleware.SecureWithConfig(middleware.SecureConfig{
|
||||||
ContentTypeNosniff: "nosniff",
|
ContentTypeNosniff: "nosniff",
|
||||||
XFrameOptions: "SAMEORIGIN",
|
XFrameOptions: "SAMEORIGIN",
|
||||||
HSTSMaxAge: 31536000, // 365 days
|
ContentSecurityPolicy: "frame-ancestors 'self' http://localhost:19006 https://*.bsky.dev",
|
||||||
|
HSTSMaxAge: 31536000, // 365 days
|
||||||
// TODO:
|
// TODO:
|
||||||
// ContentSecurityPolicy
|
|
||||||
// XSSProtection
|
// XSSProtection
|
||||||
}))
|
}))
|
||||||
e.Use(middleware.LoggerWithConfig(middleware.LoggerConfig{
|
e.Use(middleware.LoggerWithConfig(middleware.LoggerConfig{
|
||||||
|
|||||||
Reference in New Issue
Block a user