Michilis/lnbits
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: frame in frame

Browse Source
This commit is contained in:
Vlad Stan
2026-07-01 16:57:20 +03:00
parent 9a533ae71d
commit b2be906fb2
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lnbits/core/extensions/loader.py
+4 -1
View File
@@ -401,7 +401,7 @@ def _wasm_extension_wrapper_response(
user_json: str | None, user_json: str | None,
) -> Any: ) -> Any:
public = auth == "public" public = auth == "public"
return template_renderer().TemplateResponse( response = template_renderer().TemplateResponse(
request, request,
"wasm_extension.html", "wasm_extension.html",
{ {
@@ -418,6 +418,9 @@ def _wasm_extension_wrapper_response(
"user": user_json, "user": user_json,
}, },
) )
response.headers["Content-Security-Policy"] = "frame-ancestors 'self'"
response.headers["X-Frame-Options"] = "SAMEORIGIN"
return response
def _wasm_extension_frame_url(extension: WasmExtension, frame_path: str) -> str: def _wasm_extension_frame_url(extension: WasmExtension, frame_path: str) -> str: