diff options
Diffstat (limited to 'p/ext.php')
| -rw-r--r-- | p/ext.php | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -94,7 +94,8 @@ if (!is_valid_path($absolute_filename)) { $content_type = FreshRSS_extension_Controller::MIME_TYPES[$file_type]; header("Content-Type: {$content_type}"); header("Content-Disposition: inline; filename='{$file_name}'"); -header("Content-Security-Policy: default-src 'self'; frame-ancestors 'none'"); +header("Content-Security-Policy: default-src 'self'; frame-ancestors " . + (FreshRSS_Context::systemConf()->attributeString('csp.frame-ancestors') ?? "'none'")); header('X-Content-Type-Options: nosniff'); header('Referrer-Policy: same-origin'); |
