From b4f0ec085745aa8adb35864a67876152a56af336 Mon Sep 17 00:00:00 2001 From: Leonard <48012398+leofri3@users.noreply.github.com> Date: Thu, 27 Jun 2024 13:02:09 +0200 Subject: [PATCH] fixed mixup in csp.md fixed the mixup. "frame-src" is right --- docs/sdk/advanced/csp.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/sdk/advanced/csp.md b/docs/sdk/advanced/csp.md index 953189b..1adece9 100644 --- a/docs/sdk/advanced/csp.md +++ b/docs/sdk/advanced/csp.md @@ -9,11 +9,11 @@ Content Security Policy is a way to secure your website from cross-site scriptin ## Configuring your CSP for Friendly Captcha If you are using a CSP for your website you will have to configure it to allow Friendly Captcha's iframes to be embedded. -In most cases you will only need to add the `iframe-src: *.frcapi.com` directive, for example: +In most cases you will only need to add the `frame-src: *.frcapi.com` directive, for example: ```headers # old header Content-Security-Policy: default-src 'self' # new header -Content-Security-Policy: default-src 'self'; iframe-src *.frcapi.com +Content-Security-Policy: default-src 'self'; frame-src *.frcapi.com ```