vw_small

commit a622b4d2fb3134f94f156c09365d3cd243d6b4f0
parent 3968bc8016611cdf9a84db68990f27624ab17889
Author: Kaito Udagawa <umireon@gmail.com>
Date:   Thu,  8 Jul 2021 00:58:58 +0900

Add Edge's frame-ancestors

Edge's frame-ancestors are required for Edge extension to do WebAuthn.

Diffstat:
M
src/util.rs
 | 
2
+-

1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/util.rs b/src/util.rs
@@ -29,7 +29,7 @@ impl Fairing for AppHeaders {
         res.set_raw_header("X-Content-Type-Options", "nosniff");
         res.set_raw_header("X-XSS-Protection", "1; mode=block");
         let csp = format!(
-            "frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb moz-extension://* {};",
+            "frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb chrome-extension://jbkfoedolllekgbhcbcoahefnbanhhlh moz-extension://* {};",
             CONFIG.allowed_iframe_ancestors()
         );
         res.set_raw_header("Content-Security-Policy", csp);