add iframe whitelist (#520)

Co-authored-by: xieqian <[email protected]>
ref-finance · May 1, 2024 · 082499d · 082499d
1 parent ad21fea
commit 082499d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/deploy/nginx.conf b/deploy/nginx.conf
@@ -39,7 +39,8 @@ http {
       if ($request_filename ~* ^.*?\.(html)$){
         add_header Cache-Control no-store;
         add_header Pragma no-cache;
-        add_header X-Frame-Options "SAMEORIGIN";
+        # add_header X-Frame-Options "SAMEORIGIN";
+        add_header Content-Security-Policy "frame-ancestors 'self' https://tgapp.herewallet.app";
       }
     }
     # location ~ ^/[^/]+\.js$ {