From a6948218fb1c66fe146c7651555e5a1f791c8112 Mon Sep 17 00:00:00 2001 From: Inverle Date: Wed, 18 Jun 2025 22:20:17 +0200 Subject: frame-ancestors CSP (#7677) --- app/Controllers/statsController.php | 1 + 1 file changed, 1 insertion(+) (limited to 'app/Controllers/statsController.php') diff --git a/app/Controllers/statsController.php b/app/Controllers/statsController.php index 7a7180176..8759eae9d 100644 --- a/app/Controllers/statsController.php +++ b/app/Controllers/statsController.php @@ -29,6 +29,7 @@ class FreshRSS_stats_Controller extends FreshRSS_ActionController { $this->_csp([ 'default-src' => "'self'", + 'frame-ancestors' => "'none'", 'img-src' => '* data:', 'style-src' => "'self' 'unsafe-inline'", ]); -- cgit v1.2.3