Add frame-ancestor and cloudflare insights to CSP

migroscomtr · Nov 5, 2024 · 83ae204 · 83ae204
1 parent a081c8a
commit 83ae204
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@migroscomtr/prpl-server",
-  "version": "1.4.56",
+  "version": "1.4.57",
   "description": "A Node implementation of the PRPL pattern for serving Progressive Web Apps",
   "repository": "[email protected]:migroscomtr/prpl-server.git",
   "main": "lib/prpl.js",

diff --git a/src/prpl.ts b/src/prpl.ts
@@ -294,7 +294,7 @@ export function makeHandler(root?: string, config?: Config): (
         + "font-src 'self' data: https://fonts.gstatic.com ; "
         + `img-src data: blob: 'self' 'unsafe-inline' https://*.migrosone.com ${imageSrcAllowedHosts.join(' ')} ; `
         + `frame-src ${frameSrcAllowedHosts.join(' ')} ; `
-        + "frame-ancestor 'self https://*.migros.com.tr"
+        + "frame-ancestors 'self' https://*.migros.com.tr ; "
         + `style-src 'self' 'unsafe-inline' ${styleSrcAllowedHosts.join(' ')} ;`
         + `manifest-src 'self' ; `
         + "worker-src 'self' blob: ;"