Relaxed CSP and undid the wwwroot copy again (#1428)

This commit is contained in:
Joseph Milazzo 2022-08-11 20:52:48 -05:00 committed by GitHub
parent 2ae44a97c1
commit 4389971613
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -273,7 +273,7 @@ namespace API
context.Response.Headers.XFrameOptions = "SAMEORIGIN";
// Setup CSP to ensure we load assets only from these origins
context.Response.Headers.Add("Content-Security-Policy", "default-src 'self' frame-ancestors 'none';");
context.Response.Headers.Add("Content-Security-Policy", "frame-ancestors 'none';");
await next();
});