Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Blankie not setting frame-ancestors by default #45

Open
davewichers opened this issue Nov 16, 2021 · 0 comments
Open

Blankie not setting frame-ancestors by default #45

davewichers opened this issue Nov 16, 2021 · 0 comments

Comments

@davewichers
Copy link

Most CSP libraries, like Helmet for example, set: frame-ancestors 'self'; by default. Can you add that to the default setting for Blankie? And make it clear how to turn that off/change it, if that default isn't desired? I'm using Blankie, with Hapi, and @hapi/scooter if that matters.

I also find it interesting that the default-src tag value is 'none' instead of 'self', which is what I've seen all other default CSP settings to use. Why is 'none' the default-src default for Blankie?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant