From 596e3dd2db06dfa3d7e39a2925455da35212b749 Mon Sep 17 00:00:00 2001 From: bryan newbold Date: Fri, 12 Apr 2024 17:17:29 -0700 Subject: [PATCH] don't x-frame-options for embed.bsky.app --- bskyweb/cmd/embedr/server.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bskyweb/cmd/embedr/server.go b/bskyweb/cmd/embedr/server.go index a5645b361b..0cea71ae79 100644 --- a/bskyweb/cmd/embedr/server.go +++ b/bskyweb/cmd/embedr/server.go @@ -96,7 +96,7 @@ func serve(cctx *cli.Context) error { // SECURITY: Do not modify without due consideration. e.Use(middleware.SecureWithConfig(middleware.SecureConfig{ ContentTypeNosniff: "nosniff", - XFrameOptions: "SAMEORIGIN", + // diable XFrameOptions; we're embedding here! HSTSMaxAge: 31536000, // 365 days // TODO: // ContentSecurityPolicy