Improve http iframe headers

mieweb · Jan 24, 2024 · c5d0919 · c5d0919
1 parent be17bba
commit c5d0919
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/containers/server/ServerContainer.ts b/src/containers/server/ServerContainer.ts
@@ -102,7 +102,8 @@ export class ServerContainer extends Container {
 
     app.use((req, res, next) => {
       res.header('GIT_SHA', process.env.GIT_SHA);
-      res.header('x-frame-options', 'ALLOW-FROM https://docs.google.com/');
+      // res.header('x-frame-options', 'ALLOW-FROM https://docs.google.com/');
+      res.header('Content-Security-Policy', 'frame-ancestors \'self\' https://*.googleusercontent.com https://docs.google.com;');
       next();
     });