pull/1/head
ansuz 3 years ago
parent 49446fe02b
commit 1e8aa49533

@ -18,7 +18,7 @@ Default.commonCSP = function (domain, sandbox) {
*/
"child-src 'self' blob: " + domain + sandbox,
// IE/Edge
"'frame-src 'self' blob: " + sandbox,
"frame-src 'self' blob: " + sandbox,
/* this allows connections over secure or insecure websockets
if you are deploying to production, you'll probably want to remove

Loading…
Cancel
Save