From ef4af0608ba9bde7dfc54253afc1f00c86935ce2 Mon Sep 17 00:00:00 2001 From: Jules-Bertholet Date: Sat, 6 Mar 2021 11:02:18 -0500 Subject: [PATCH] Fix embeds again It seems that to get embeds to work consistently the CSP also needs to be modified --- conf/nginx.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/conf/nginx.conf b/conf/nginx.conf index 31c48c0..0d65772 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -39,4 +39,5 @@ location __PATH__/embed/ { proxy_set_header Connection "upgrade"; more_set_headers "X-Frame-Options : ALLOWALL"; + more_set_headers "Content-Security-Policy : upgrade-insecure-requests ; frame-ancestors * "; }