tiennm99/HugoBlox-kit
1
0 Fork 0
mirror of https://github.com/tiennm99/HugoBlox-kit.git synced 2026-10-11 12:11:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: allow same origin iframes to support slides

Browse Source
This commit is contained in:
George Cushen committed 2025-12-15 00:13:47 +00:00
1 parent d15979197a
commit c72b26de8d
2 files changed
+9 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

modules/blox-plugin-netlify/src/layouts/index.headers
+8 -3
View File
@@ -1,14 +1,19 @@
{{- $csp_policy := site.Params.hugoblox.security.csp.policy | default "" -}}
{{- $csp_report_only := site.Params.hugoblox.security.csp.report_only | default false -}}
{{- $frame_options := site.Params.hugoblox.security.frame_options | default "deny" -}}
{{- $allow_frame := eq $frame_options "allow" -}}
{{- $frame_options := site.Params.hugoblox.security.frame_options | default "sameorigin" -}}
{{- $default_perms := "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()" -}}
{{- $permissions_policy := site.Params.hugoblox.security.permissions_policy | default $default_perms -}}
# Netlify headers
# Automatically generated
# Documentation: https://docs.hugoblox.com/hugo-tutorials/security/
/*
{{if not $allow_frame}}X-Frame-Options: DENY{{end}}
{{- if eq $frame_options "allow" -}}
{{/* No X-Frame-Options header - allows all origins */}}
{{- else if eq $frame_options "sameorigin" -}}
X-Frame-Options: SAMEORIGIN
{{- else -}}
X-Frame-Options: DENY
{{- end -}}
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains