fix: trust iframe urls

This commit is contained in:
ajnart committed 2026-08-26 17:35:39 +02:00
1 parent c34629d39e
commit 55b62a6e2b
5 files changed
+15 -69

No files matched your search

-2
View File
@@ -66,8 +66,6 @@ add_header Content-Security-Policy "frame-ancestors 'self' https://trusted-domai
- **Wikipedia homepage:** https://en.wikipedia.org/wiki/Main_Page
- **Any YouTube video or stream:** https://www.youtube.com/embed/dQw4w9WgXcQ?si=MWUbbG66UNTla_Ni
- **Same-origin page:** `/path/to/page` resolves from the current Homarr origin. Root-relative URLs are useful when Homarr and
the embedded page share a reverse-proxy host.
### Configuration