Merge pull request #3494 from alasjo/master

Malformed CSP: prevent frameAncestors to be undefined
This commit is contained in:
Mike Cao
2025-06-27 09:15:05 -07:00
committed by GitHub

View File

@@ -16,7 +16,7 @@ const disableLogin = process.env.DISABLE_LOGIN;
const disableUI = process.env.DISABLE_UI;
const faviconURL = process.env.FAVICON_URL;
const forceSSL = process.env.FORCE_SSL;
const frameAncestors = process.env.ALLOWED_FRAME_URLS;
const frameAncestors = process.env.ALLOWED_FRAME_URLS ?? '';
const privateMode = process.env.PRIVATE_MODE;
const trackerScriptName = process.env.TRACKER_SCRIPT_NAME;
const trackerScriptURL = process.env.TRACKER_SCRIPT_URL;