disable iframe blocking headers

This commit is contained in:
Jeremy Kauffman 2019-12-07 11:50:08 -05:00
parent 6e928b28e0
commit e791b51de7

View file

@ -249,8 +249,8 @@ class Response
public static function setDefaultSecurityHeaders() public static function setDefaultSecurityHeaders()
{ {
$defaultHeaders = [ $defaultHeaders = [
'Content-Security-Policy' => "frame-ancestors 'none'", //'Content-Security-Policy' => "frame-ancestors 'none'",
'X-Frame-Options' => 'DENY', //'X-Frame-Options' => 'DENY',
'X-XSS-Protection' => '1', 'X-XSS-Protection' => '1',
]; ];