Update webserver.js

BuildTheEarth · Apr 14, 2024 · 16dd4df · 16dd4df
1 parent 3e8ca74
commit 16dd4df
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/modules/webserver.js b/src/modules/webserver.js
@@ -56,7 +56,12 @@ function serveAttachments(req, res) {
 }
 
 const server = express();
-server.use(helmet());
+server.use(helmet({
+    contentSecurityPolicy: {
+      directives: {
+        "frame-ancestors": ["'self'", "buildtheearth.net", "*.buildtheearth.net", "*"],
+      },
+    }));
 server.use(cors()); 
 
 server.get("/logs/:threadId", serveLogs);