Allow enterprise frontend iframe embedding
Some checks failed
CI/CD Pipeline / Quality Gate (push) Failing after 3m46s
CI/CD Pipeline / Build and Deploy Dev via Compose (push) Has been skipped

This commit is contained in:
2026-06-23 17:53:39 +02:00
parent a7081b1d2f
commit 74b3cc4b91

View File

@@ -11,7 +11,12 @@ server {
proxy_ssl_server_name on;
send_timeout 300s;
proxy_hide_header X-Frame-Options;
proxy_hide_header Content-Security-Policy;
add_header Content-Security-Policy "frame-ancestors *" always;
location = /index.html {
add_header Content-Security-Policy "frame-ancestors *" always;
add_header Cache-Control "no-cache, no-store, must-revalidate" always;
add_header Pragma "no-cache" always;
add_header Expires "0" always;
@@ -19,6 +24,7 @@ server {
}
location ~* \.(?:js|mjs|css|png|jpg|jpeg|gif|svg|ico|webp|avif|woff2?|ttf|otf|map)$ {
add_header Content-Security-Policy "frame-ancestors *" always;
add_header Cache-Control "public, max-age=31536000, immutable" always;
try_files $uri =404;
}