aboutsummaryrefslogtreecommitdiff
path: root/app/Controllers/statsController.php
diff options
context:
space:
mode:
authorGravatar Inverle <inverle@proton.me> 2025-06-18 22:20:17 +0200
committerGravatar GitHub <noreply@github.com> 2025-06-18 22:20:17 +0200
commita6948218fb1c66fe146c7651555e5a1f791c8112 (patch)
treea878349b1d2808d2ed7318aa34df0546e534690e /app/Controllers/statsController.php
parentaa45bcbe5a0a723c4b6adfb50139be0be6336d2b (diff)
frame-ancestors CSP (#7677)
Diffstat (limited to 'app/Controllers/statsController.php')
-rw-r--r--app/Controllers/statsController.php1
1 files changed, 1 insertions, 0 deletions
diff --git a/app/Controllers/statsController.php b/app/Controllers/statsController.php
index 7a7180176..8759eae9d 100644
--- a/app/Controllers/statsController.php
+++ b/app/Controllers/statsController.php
@@ -29,6 +29,7 @@ class FreshRSS_stats_Controller extends FreshRSS_ActionController {
$this->_csp([
'default-src' => "'self'",
+ 'frame-ancestors' => "'none'",
'img-src' => '* data:',
'style-src' => "'self' 'unsafe-inline'",
]);