We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 736abe3 commit b965d15Copy full SHA for b965d15
lib/livebook_web/router.ex
@@ -178,7 +178,9 @@ defmodule LivebookWeb.Router do
178
179
defp within_iframe_secure_headers(conn, _opts) do
180
if Livebook.Config.within_iframe?() do
181
- delete_resp_header(conn, "x-frame-options")
+ [value] = get_resp_header(conn, "content-security-policy")
182
+ value = String.replace(value, "frame-ancestors 'self';", "frame-ancestors *;")
183
+ put_resp_header(conn, "content-security-policy", value)
184
else
185
conn
186
end
0 commit comments