Files
storyteller-bevy/netlify.toml
T
Brandon Thomas b36ee00d73 frame-ancestors
2024-03-09 04:14:32 -05:00

11 lines
484 B
TOML

[[headers]]
for = "/*"
[headers.values]
# NB: This is potentially dangerous, but I don't think we have much other choice:
Access-Control-Allow-Origin = "*"
# https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors
# NB: The *.netlify.app is dangerous.
Content-Security-Policy = "frame-ancestors 'self' https://fakeyou.com https://*.fakeyou.com https://storyteller.ai https://*.storyteller.ai https://*.netlify.app;"