Merge pull request #22 from OpenLMIS/OLMIS-7998

OLMIS-7998: Added Superset address to Content-Security-Policy - frame-src
OpenLMIS · Oct 7, 2024 · 786fe9a · 786fe9a
2 parents 822b20c + 3f71db6
commit 786fe9a
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/index.html b/src/index.html
@@ -16,10 +16,11 @@
 <html lang="@@DEFAULT_LANGUAGE" ng-app="openlmis" manifest="manifest.appcache" xmlns="http://www.w3.org/1999/html">
     <head>
         <meta charset="utf-8">
-        <meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-inline';
+        <meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-inline' https://superset-uat.openlmis.org/*;
                img-src 'self' www.google-analytics.com;
                script-src 'self' www.google-analytics.com 'unsafe-inline';
-               connect-src 'self' www.google-analytics.com https://superset-uat.openlmis.org;" />
+               connect-src 'self' www.google-analytics.com https://superset-uat.openlmis.org;
+               frame-src 'self' https://superset-uat.openlmis.org/*;" />
         <meta http-equiv="X-Content-Type-Options" content="nosniff" />
         <meta http-equiv="Referrer-Policy" content="no-referrer" />
         <meta http-equiv="Permissions-Policy" content="geolocation=(), microphone=()" />