fix: add content security policy

activepieces · May 22, 2024 · b974057 · b974057
1 parent 7944880
commit b974057
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/packages/ui/core/nginx.standard.conf b/packages/ui/core/nginx.standard.conf
@@ -3,6 +3,7 @@ http {
     include /etc/nginx/mime.types;
     client_max_body_size 4m;
     add_header X-Frame-Options SAMEORIGIN always;
+    add_header Content-Security-Policy "frame-ancestors 'self' http://localhost:*";
 
     map $http_accept_language $accept_language {
         ~*^en en;