secu: add nginx header config for CSP frame-ancestors (#1759)

getlago · Sep 23, 2024 · 136b559 · 136b559
1 parent 2a26504
commit 136b559
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/nginx/nginx.conf b/nginx/nginx.conf
@@ -1,12 +1,13 @@
 server {
   listen 80;
   listen [::]:80;
-  
+
   location / {
+    add_header Content-Security-Policy "frame-ancestors *.force.com;" always;
     root /usr/share/nginx/html;
     index index.html index.htm;
     try_files $uri $uri/ /index.html =404;
   }
-  
+
   include /etc/nginx/extra-conf.d/*.conf;
 }