PROD :: allow ifram

This commit is contained in:
badrAG 2024-04-05 09:17:18 +00:00
parent a2245efa2d
commit 95045b6e0e

View file

@ -10,7 +10,6 @@ const defaultLocale = process.env.DEFAULT_LOCALE || '';
const trackerScriptName = process.env.TRACKER_SCRIPT_NAME || ''; const trackerScriptName = process.env.TRACKER_SCRIPT_NAME || '';
const cloudMode = process.env.CLOUD_MODE || ''; const cloudMode = process.env.CLOUD_MODE || '';
const cloudUrl = process.env.CLOUD_URL || ''; const cloudUrl = process.env.CLOUD_URL || '';
const frameAncestors = process.env.ALLOWED_FRAME_URLS || '';
const disableLogin = process.env.DISABLE_LOGIN || ''; const disableLogin = process.env.DISABLE_LOGIN || '';
const disableUI = process.env.DISABLE_UI || ''; const disableUI = process.env.DISABLE_UI || '';
const hostURL = process.env.HOST_URL || ''; const hostURL = process.env.HOST_URL || '';
@ -20,8 +19,7 @@ const contentSecurityPolicy = [
`img-src *`, `img-src *`,
`script-src 'self' 'unsafe-eval' 'unsafe-inline'`, `script-src 'self' 'unsafe-eval' 'unsafe-inline'`,
`style-src 'self' 'unsafe-inline'`, `style-src 'self' 'unsafe-inline'`,
`connect-src 'self' api.umami.is cloud.umami.is`, `connect-src 'self' api.umami.is cloud.umami.is`
`frame-ancestors 'self' ${frameAncestors}`,
]; ];
const headers = [ const headers = [