diff options
Diffstat (limited to 'app/Controllers')
| -rwxr-xr-x | app/Controllers/feedController.php | 1 | ||||
| -rw-r--r-- | app/Controllers/indexController.php | 2 | ||||
| -rw-r--r-- | app/Controllers/statsController.php | 1 |
3 files changed, 4 insertions, 0 deletions
diff --git a/app/Controllers/feedController.php b/app/Controllers/feedController.php index 9769a6df0..35b209a4d 100755 --- a/app/Controllers/feedController.php +++ b/app/Controllers/feedController.php @@ -1150,6 +1150,7 @@ class FreshRSS_feed_Controller extends FreshRSS_ActionController { $this->_csp([ 'default-src' => "'self'", + 'frame-ancestors' => "'self'", 'frame-src' => '*', 'img-src' => '* data:', 'media-src' => '*', diff --git a/app/Controllers/indexController.php b/app/Controllers/indexController.php index 1f49e03ee..661e8300b 100644 --- a/app/Controllers/indexController.php +++ b/app/Controllers/indexController.php @@ -50,6 +50,7 @@ class FreshRSS_index_Controller extends FreshRSS_ActionController { 'default-src' => "'self'", 'frame-src' => '*', 'img-src' => '* data:', + 'frame-ancestors' => "'none'", 'media-src' => '*', ]); @@ -138,6 +139,7 @@ class FreshRSS_index_Controller extends FreshRSS_ActionController { 'default-src' => "'self'", 'frame-src' => '*', 'img-src' => '* data:', + 'frame-ancestors' => "'none'", 'media-src' => '*', ]); } diff --git a/app/Controllers/statsController.php b/app/Controllers/statsController.php index 7a7180176..8759eae9d 100644 --- a/app/Controllers/statsController.php +++ b/app/Controllers/statsController.php @@ -29,6 +29,7 @@ class FreshRSS_stats_Controller extends FreshRSS_ActionController { $this->_csp([ 'default-src' => "'self'", + 'frame-ancestors' => "'none'", 'img-src' => '* data:', 'style-src' => "'self' 'unsafe-inline'", ]); |