diff options
| -rw-r--r-- | netlify-pr.go | 8 | ||||
| -rw-r--r-- | netlify.toml | 2 |
2 files changed, 5 insertions, 5 deletions
diff --git a/netlify-pr.go b/netlify-pr.go index f3e5057..58630fd 100644 --- a/netlify-pr.go +++ b/netlify-pr.go @@ -41,10 +41,10 @@ func main() { repStr = "${1} ${2} blob: https://app.netlify.com${3}" newStr = reStr.ReplaceAllString(newStr, repStr) - // -> frame-src 'none'; - // <- frame-src app.netlify.com; - reStr = regexp.MustCompile("(frame-src) ('none')(;)") - repStr = "${1} app.netlify.com${3}" + // -> frame-src hypothes.is; + // <- frame-src hypothes.is app.netlify.com; + reStr = regexp.MustCompile(`(frame-src) (hypothes\.is)(;)`) + repStr = "${1} ${2} app.netlify.com${3}" newStr = reStr.ReplaceAllString(newStr, repStr) // -> script-src 'self' www.googletagmanager.com hypothes.is cdn.hypothes.is; diff --git a/netlify.toml b/netlify.toml index 15c85ac..d1e3350 100644 --- a/netlify.toml +++ b/netlify.toml @@ -96,7 +96,7 @@ connect-src 'self' *.google-analytics.com analytics.google.com www.googletagmanager.com stats.g.doubleclick.net; media-src 'self'; object-src 'self'; - frame-src 'none'; + frame-src hypothes.is; worker-src 'self'; frame-ancestors 'none'; form-action 'self' submit-form.com; |