Add frame-ancestors CSP directive

LimeSoda · Nov 28, 2024 · 32818ad · 32818ad
1 parent 7d4e7bd
commit 32818ad
Show file tree

Hide file tree

Showing 2 changed files with 140 additions and 160 deletions.
diff --git a/Configuration/FlexForm/ContentSecurityPolicy.xml b/Configuration/FlexForm/ContentSecurityPolicy.xml
@@ -86,6 +86,17 @@
                             </config>
                         </TCEforms>
                     </frameSrc>
+                    <frameAncestors>
+                        <TCEforms>
+                            <label>frame-ancestors</label>
+                            <description>LLL:EXT:ls_security_headers/Resources/Private/Language/locallang_tca.xlf:tx_lssecurityheaders_headers.content_security_policy.frame-ancestors.description</description>
+                            <config>
+                                <type>text</type>
+                                <eval>trim</eval>
+                                <placeholder>'none' 'self' example.com *.example.com https://onlysecure.example.com</placeholder>
+                            </config>
+                        </TCEforms>
+                    </frameAncestors>
                     <fontSrc>
                         <TCEforms>
                             <label>font-src</label>