AZEN-SGG/Kavita
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Relaxed CSP and undid the wwwroot copy again (#1428)

Browse source
This commit is contained in:
Joseph Milazzo 2022-08-11 20:52:48 -05:00 • committed by GitHub
parent 2ae44a97c1
commit 4389971613
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
API/Startup.cs
View file

@ -273,7 +273,7 @@ namespace API
context.Response.Headers.XFrameOptions = "SAMEORIGIN";
// Setup CSP to ensure we load assets only from these origins
context.Response.Headers.Add("Content-Security-Policy", "default-src 'self' frame-ancestors 'none';");
context.Response.Headers.Add("Content-Security-Policy", "frame-ancestors 'none';");
await next();
});