From a622b4d2fb3134f94f156c09365d3cd243d6b4f0 Mon Sep 17 00:00:00 2001 From: Kaito Udagawa Date: Thu, 8 Jul 2021 00:58:58 +0900 Subject: [PATCH] Add Edge's frame-ancestors Edge's frame-ancestors are required for Edge extension to do WebAuthn. --- src/util.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/util.rs b/src/util.rs index 8512bc7b..14e8c52e 100644 --- a/src/util.rs +++ b/src/util.rs @@ -29,7 +29,7 @@ impl Fairing for AppHeaders { res.set_raw_header("X-Content-Type-Options", "nosniff"); res.set_raw_header("X-XSS-Protection", "1; mode=block"); let csp = format!( - "frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb moz-extension://* {};", + "frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb chrome-extension://jbkfoedolllekgbhcbcoahefnbanhhlh moz-extension://* {};", CONFIG.allowed_iframe_ancestors() ); res.set_raw_header("Content-Security-Policy", csp);