From a6948218fb1c66fe146c7651555e5a1f791c8112 Mon Sep 17 00:00:00 2001 From: Inverle Date: Wed, 18 Jun 2025 22:20:17 +0200 Subject: frame-ancestors CSP (#7677) --- app/Controllers/indexController.php | 2 ++ 1 file changed, 2 insertions(+) (limited to 'app/Controllers/indexController.php') diff --git a/app/Controllers/indexController.php b/app/Controllers/indexController.php index 1f49e03ee..661e8300b 100644 --- a/app/Controllers/indexController.php +++ b/app/Controllers/indexController.php @@ -50,6 +50,7 @@ class FreshRSS_index_Controller extends FreshRSS_ActionController { 'default-src' => "'self'", 'frame-src' => '*', 'img-src' => '* data:', + 'frame-ancestors' => "'none'", 'media-src' => '*', ]); @@ -138,6 +139,7 @@ class FreshRSS_index_Controller extends FreshRSS_ActionController { 'default-src' => "'self'", 'frame-src' => '*', 'img-src' => '* data:', + 'frame-ancestors' => "'none'", 'media-src' => '*', ]); } -- cgit v1.2.3