Allowing loading Dshop in iframes (#4512)

* Allowing loading Dshop in iframes * Update frame-src
OriginProtocol · Nov 9, 2020 · e02af3c · e02af3c
1 parent 31c691c
commit e02af3c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/devops/dockerfiles/snippets/origin-dapp-creator-issuer/nginx.conf.template b/devops/dockerfiles/snippets/origin-dapp-creator-issuer/nginx.conf.template
@@ -111,7 +111,7 @@ http {
       more_set_headers "Strict-Transport-Security: max-age=31536000";
       more_set_headers "Expect-CT: max-age=86400";
       more_set_headers "Feature-Policy: microphone 'none'";
-      more_set_headers "Content-Security-Policy: default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: data: blob:;";
+      more_set_headers "Content-Security-Policy: default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: data: blob:; frame-src https: 'unsafe-inline' 'unsafe-eval';";
     }
   }
 }