acetheking987/bsky-social-app
1
0
Fork 0
Code Issues Actions Packages Projects Releases 1 Wiki Activity

don't x-frame-options for embed.bsky.app

Browse Source
This commit is contained in:
bryan newbold
2024-04-12 17:17:29 -07:00
committed by Dan Abramov
parent b585091108
commit 596e3dd2db
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bskyweb/cmd/embedr/server.go
+1 -1
View File
@@ -96,7 +96,7 @@ func serve(cctx *cli.Context) error {
// SECURITY: Do not modify without due consideration. // SECURITY: Do not modify without due consideration.
e.Use(middleware.SecureWithConfig(middleware.SecureConfig{ e.Use(middleware.SecureWithConfig(middleware.SecureConfig{
ContentTypeNosniff: "nosniff", ContentTypeNosniff: "nosniff",
XFrameOptions: "SAMEORIGIN", // diable XFrameOptions; we're embedding here!
HSTSMaxAge: 31536000, // 365 days HSTSMaxAge: 31536000, // 365 days
// TODO: // TODO:
// ContentSecurityPolicy // ContentSecurityPolicy