From 7d5c4908744bac985f83d09dff4110e3735ae6ab Mon Sep 17 00:00:00 2001 From: Brandon Thomas Date: Sun, 10 Mar 2024 05:13:48 -0400 Subject: [PATCH] CORS - add allowed frame ancestors for development --- netlify.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/netlify.toml b/netlify.toml index 15bbb6e..e0eccd8 100644 --- a/netlify.toml +++ b/netlify.toml @@ -6,5 +6,5 @@ # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors # NB: The *.netlify.app is dangerous. - Content-Security-Policy = "frame-ancestors 'self' https://fakeyou.com https://*.fakeyou.com https://storyteller.ai https://*.storyteller.ai https://*.netlify.app;" + Content-Security-Policy = "frame-ancestors 'self' https://fakeyou.com https://*.fakeyou.com https://storyteller.ai https://*.storyteller.ai https://*.netlify.app http://*.fakeyou.com:7000 http://*.fakeyou.com:7001 http://*.fakeyou.com:7002 http://*.storyteller.ai:7000 http://*.storyteller.ai:7001 http://*.storyteller.ai:7002;"