From 818742dd5653cde44404c65b3062af789c874cb5 Mon Sep 17 00:00:00 2001
From: Caleb James DeLisle <cjd@cjdns.fr>
Date: Mon, 28 Aug 2017 11:20:24 +0200
Subject: [PATCH] Add frame-src for IE/Edge compatibility

---
 config.example.js | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/config.example.js b/config.example.js
index 1b28a5e89..ce38b5c3a 100644
--- a/config.example.js
+++ b/config.example.js
@@ -35,6 +35,8 @@ module.exports = {
          *  domain which will serve your CryptPad instance.
          */
         "child-src blob: *",
+        // IE/Edge
+        "frame-src blob: *",
 
         "media-src * blob:",
 
@@ -62,7 +64,9 @@ module.exports = {
         /*  See above under 'contentSecurity' as to how these values should be
          *  configured for best effect.
          */
-         "child-src *",
+        "child-src *",
+        // IE/Edge
+        "frame-src *",
 
         // see the comment above in the 'contentSecurity' section
          "connect-src 'self' ws: wss:" + domain,