don't x-frame-options for embed.bsky.app

2024-04-12 17:17:29 -07:00
parent b585091108
commit 596e3dd2db
1 changed files with 1 additions and 1 deletions
@@ -96,7 +96,7 @@ func serve(cctx *cli.Context) error {
 	// SECURITY: Do not modify without due consideration.
 	e.Use(middleware.SecureWithConfig(middleware.SecureConfig{
 		ContentTypeNosniff: "nosniff",
-		XFrameOptions:      "SAMEORIGIN",
+		// diable XFrameOptions; we're embedding here!
 		HSTSMaxAge:         31536000, // 365 days
 		// TODO:
 		// ContentSecurityPolicy