no frames

rodber · Oct 18, 2021 · 52760d0 · 52760d0
1 parent 1325324
commit 52760d0
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/web.php b/app/web.php
@@ -148,6 +148,7 @@
 try {
     if (!isset($hook_before)) {
         $hook_before = function ($handler) {
+            header("Content-Security-Policy: frame-ancestors 'none'");
             $failed_access_requests = Requestlog::getCounts(['login', 'signup'], 'fail');
             if (is_max_invalid_request($failed_access_requests['day'])) {
                 G\set_status_header(403);