Merge pull request #50 from AOT-Technologies/revert-49-bugfix/single-…

…domain-embed-issue Revert "[Bugfix] Dashboard display issue with single domain configuration fix by changing frame-ancestors to 'self'"
AOT-Technologies · Dec 18, 2024 · 7c3a13b · 7c3a13b
2 parents 3c341aa + c90fcdc
commit 7c3a13b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/redash/settings/__init__.py b/redash/settings/__init__.py
@@ -117,7 +117,7 @@
 # for more information. E.g.:
 CONTENT_SECURITY_POLICY = os.environ.get(
     "REDASH_CONTENT_SECURITY_POLICY",
-    "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval'; font-src 'self' data:; img-src 'self' http: https: data: blob:; object-src 'none'; frame-ancestors 'self'; frame-src redash.io;",
+    "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval'; font-src 'self' data:; img-src 'self' http: https: data: blob:; object-src 'none'; frame-ancestors 'none'; frame-src redash.io;",
 )
 CONTENT_SECURITY_POLICY_REPORT_URI = os.environ.get("REDASH_CONTENT_SECURITY_POLICY_REPORT_URI", "")
 CONTENT_SECURITY_POLICY_REPORT_ONLY = parse_boolean(