Do not allow iframing the frontend

runephilosof-abtion · runephilosof-abtion · commit 22e3f492bba6 · 2024-08-21T15:36:03.000+02:00
diff --git a/frontend/nginx.conf b/frontend/nginx.conf
@@ -5,6 +5,8 @@ upstream web {
 server {
   listen 80;
 
+  add_header Content-Security-Policy "frame-ancestors 'none'" always;
+
   location ~ ^/api(/?)(.*) {
     proxy_pass http://web/$2$is_args$args;
   }

Original file line number	Diff line number	Diff line change
`@@ -5,6 +5,8 @@ upstream web {`
`5`	`5`	`server {`
`6`	`6`	`listen 80;`
`7`	`7`
	`8`	`+ add_header Content-Security-Policy "frame-ancestors 'none'" always;`
	`9`	`+`
`8`	`10`	`location ~ ^/api(/?)(.*) {`
`9`	`11`	`proxy_pass http://web/$2$is_args$args;`
`10`	`12`	`}`