From b7ae218e25558afbf85302cf6016c32bac6179d6 Mon Sep 17 00:00:00 2001 From: Domenico DiNicola Date: Tue, 14 Nov 2023 14:44:23 +0100 Subject: [PATCH] csp frame ancestor --- src/aurora/config/settings.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/aurora/config/settings.py b/src/aurora/config/settings.py index f1ee3595..cf76926e 100644 --- a/src/aurora/config/settings.py +++ b/src/aurora/config/settings.py @@ -649,7 +649,10 @@ def show_ddt(request): # pragma: no-cover "csp.middleware.CSPMiddleware", ] CSP_DEFAULT_SRC = SOURCES -CSP_FRAME_ANCESTORS = ("'none'",) +CSP_FRAME_ANCESTORS = ( + "'none'", + "'self'", +) # CSP_SCRIPT_SRC = SOURCES # CSP_STYLE_SRC = ( # "'self'",