welp you need vector on to pass checks (cryptpad)

This commit is contained in:
root 2022-10-04 23:58:09 -04:00
parent b0174f9629
commit fc4e78e98f
1 changed files with 2 additions and 2 deletions

View File

@ -136,8 +136,8 @@ server {
# this must include 'self' and your main domain (over HTTPS) in order for CryptPad to work
# if you have enabled remote embedding via the admin panel then this must be more permissive.
# note: cryptpad.fr permits web pages served via https: and vector: (element desktop app)
set $frameAncestors "'self' https://${main_domain}";
#set $frameAncestors "'self' https: vector:";
#set $frameAncestors "'self' https://${main_domain}";
set $frameAncestors "'self' https: vector:";
set $unsafe 0;
# the following assets are loaded via the sandbox domain