Update frontend/frontend.conf.template

ikreymer · SuaYoo · web-flow · commit eea4c8e8810e · 2025-12-02T11:25:11.000-08:00
Co-authored-by: sua yoo &lt;sua@webrecorder.org&gt;
diff --git a/frontend/frontend.conf.template b/frontend/frontend.conf.template
@@ -151,7 +151,7 @@ server {
       proxy_pass http://browser-$browserid.browser$fqdn_suffix:9223/vnc/;
       proxy_set_header Host "localhost";
 
-      add_header Content-Security-Policy "frame-ancestors *";
+      add_header Content-Security-Policy "frame-ancestors 'self' localhost:*";
     }
 
     location = /access_check_profiles {

Original file line number	Diff line number	Diff line change
`@@ -151,7 +151,7 @@ server {`
`151`	`151`	`proxy_pass http://browser-$browserid.browser$fqdn_suffix:9223/vnc/;`
`152`	`152`	`proxy_set_header Host "localhost";`
`153`	`153`
`154`		`- add_header Content-Security-Policy "frame-ancestors *";`
	`154`	`+ add_header Content-Security-Policy "frame-ancestors 'self' localhost:*";`
`155`	`155`	`}`
`156`	`156`
`157`	`157`	`location = /access_check_profiles {`