blankie icon indicating copy to clipboard operation
blankie copied to clipboard

Blankie not setting frame-ancestors by default

Open davewichers opened this issue 2 years ago • 0 comments

Most CSP libraries, like Helmet for example, set: frame-ancestors 'self'; by default. Can you add that to the default setting for Blankie? And make it clear how to turn that off/change it, if that default isn't desired? I'm using Blankie, with Hapi, and @hapi/scooter if that matters.

I also find it interesting that the default-src tag value is 'none' instead of 'self', which is what I've seen all other default CSP settings to use. Why is 'none' the default-src default for Blankie?

davewichers avatar Nov 16 '21 22:11 davewichers