Add CSP on viz

dust-tt · Jul 25, 2024 · 130f75e · 130f75e
1 parent 87c8725
commit 130f75e
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/viz/next.config.mjs b/viz/next.config.mjs
@@ -11,6 +11,12 @@ const nextConfig = {
             key: "Access-Control-Allow-Origin",
             value: isDev ? "http://localhost:3000" : "https://dust.tt",
           },
+          {
+            key: "Content-Security-Policy",
+            value: isDev
+              ? "frame-ancestors 'self' http://localhost:3000;"
+              : "frame-ancestors 'self' https://dust.tt;",
+          },
         ],
       },
       // Allow CORS for static files.