add frame-ancestors rule to csp

163ee434 · Max Alekseenko · 0b60ada3 · 163ee434
Commit 163ee434 authored May 16, 2024 by Max Alekseenko
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 0 deletions

app.ts nextjs/csp/policies/app.ts +4 -0

No files found.
--- a/nextjs/csp/policies/app.ts
+++ b/nextjs/csp/policies/app.ts
@@ -133,6 +133,10 @@ export function app(): CspDev.DirectiveDescriptor {
      '*',
    ],

+    'frame-ancestors': [
+      KEY_WORDS.SELF,
+    ],
+
    ...((() => {
      if (!config.features.sentry.isEnabled) {
        return {};