mirror of
https://github.com/FreshRSS/FreshRSS.git
synced 2026-10-19 09:53:22 -04:00
CSP allow iframes
E.g. for YouTube videos, etc. https://github.com/FreshRSS/FreshRSS/issues/1075
This commit is contained in:
1 parent
e4a459a6ed
commit
8cdf44c87b
1 file changed
+1
-1
+1
-1
@@ -168,7 +168,7 @@ class FreshRSS extends Minz_FrontController {
|
||||
}
|
||||
|
||||
public static function preLayout() {
|
||||
header("Content-Security-Policy: default-src 'self'; img-src * data:; media-src *; style-src 'self' 'unsafe-inline'");
|
||||
header("Content-Security-Policy: default-src 'self'; child-src *; img-src * data:; media-src *; style-src 'self' 'unsafe-inline'");
|
||||
self::setJavascriptCookie();
|
||||
}
|
||||
|
||||
|
||||
Reference in new issue
Block a user