From 86d283f7f6b6e50e1b57fbf28970db2f6b2711dc Mon Sep 17 00:00:00 2001 From: 0thernet Date: Wed, 7 Oct 2026 12:24:55 -0400 Subject: [PATCH] Remove frame-ancestors and X-Frame-Options enforcement Owner decision: no hraness site enforces anti-framing. Other CSP directives and security headers stay. Co-Authored-By: Claude Opus 5.5 --- scripts/security-delivery-browser.ts | 1 - 1 file changed, 1 deletion(-) diff --git a/scripts/security-delivery-browser.ts b/scripts/security-delivery-browser.ts index faffee6..824342f 100644 --- a/scripts/security-delivery-browser.ts +++ b/scripts/security-delivery-browser.ts @@ -49,7 +49,6 @@ const contentSecurityPolicy = [ "default-src 'none'", "base-uri 'none'", "object-src 'none'", - "frame-ancestors 'none'", "form-action 'none'", `script-src 'nonce-${nonce}' 'strict-dynamic'`, "script-src-attr 'none'",