vw_small

commit 149e69414fd6e10d2505701b86231ad2ae93b6f2
parent 1f4edb38e6d03926b1fd6d52cfe9913ffbcfda41
Author: Daniel García <dani-garcia@users.noreply.github.com>
Date:   Tue, 18 Dec 2018 19:00:43 +0100

Merge pull request #293 from dheimerl/patch-1

Update web.rs
Diffstat:
M
src/api/web.rs
 | 
2
++

1 file changed, 2 insertions(+), 0 deletions(-)
diff --git a/src/api/web.rs b/src/api/web.rs
@@ -56,6 +56,8 @@ impl<'r, R: Responder<'r>> Responder<'r> for WebHeaders<R> {
                 res.set_raw_header("X-Frame-Options", "SAMEORIGIN");
                 res.set_raw_header("X-Content-Type-Options", "nosniff");
                 res.set_raw_header("X-XSS-Protection", "1; mode=block");
+                let csp = "frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb moz-extension://*;";
+                res.set_raw_header("Content-Security-Policy", csp);
 
                 Ok(res)
             },