csp

unicef · Nov 10, 2023 · 9bfb350 · 9bfb350
1 parent 881a778
commit 9bfb350
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/aurora/config/settings.py b/src/aurora/config/settings.py
@@ -648,7 +648,8 @@ def show_ddt(request):  # pragma: no-cover
     "csp.middleware.CSPMiddleware",
 ]
 CSP_DEFAULT_SRC = SOURCES
-CSP_FRAME_SRC = []
+CSP_DEFAULT_SRC = ("'self'",)
+CSP_FRAME_ANCESTORS = ("'none'",)
 # CSP_SCRIPT_SRC = SOURCES
 # CSP_STYLE_SRC = (
 #     "'self'",