Add config option to disallow framing via CSP

Signed-off-by: David Mehren <git@herrmehren.de>
2021-07-18 09:59:14 +02:00
parent 9499add64c
commit bd44cbc16c
4 changed files with 12 additions and 6 deletions
--- a/lib/config/default.js
+++ b/lib/config/default.js
@@ -25,7 +25,8 @@ module.exports = {
    addDisqus: false,
    addGoogleAnalytics: false,
    upgradeInsecureRequests: 'auto',
-    reportURI: undefined
+    reportURI: undefined,
+    allowFraming: true
  },
  cookiePolicy: 'lax',
  protocolUseSSL: false,