Merge pull request #49 from AOT-Technologies/bugfix/single-domain-emb…

…ed-issue [Bugfix] Dashboard display issue with single domain configuration fix by changing frame-ancestors to 'self'
AOT-Technologies · Dec 17, 2024 · 3c341aa · 3c341aa
2 parents 20e48cd + 0fc699f
commit 3c341aa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/redash/settings/__init__.py b/redash/settings/__init__.py
@@ -117,7 +117,7 @@
 # for more information. E.g.:
 CONTENT_SECURITY_POLICY = os.environ.get(
     "REDASH_CONTENT_SECURITY_POLICY",
-    "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval'; font-src 'self' data:; img-src 'self' http: https: data: blob:; object-src 'none'; frame-ancestors 'none'; frame-src redash.io;",
+    "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval'; font-src 'self' data:; img-src 'self' http: https: data: blob:; object-src 'none'; frame-ancestors 'self'; frame-src redash.io;",
 )
 CONTENT_SECURITY_POLICY_REPORT_URI = os.environ.get("REDASH_CONTENT_SECURITY_POLICY_REPORT_URI", "")
 CONTENT_SECURITY_POLICY_REPORT_ONLY = parse_boolean(