fix(embeddable-player): enable any ancestor when X-Frame-Options is set on server

2021-03-01 15:59:07 +01:00 · 2021-03-01 15:59:07 +01:00 · 44a4962e0b
parent 4e5b11ba5f
commit 44a4962e0b
1 changed files with 2 additions and 0 deletions
--- a/app/Controllers/Episode.php
+++ b/app/Controllers/Episode.php
@ -88,6 +88,8 @@ class Episode extends BaseController

    public function embeddablePlayer($theme = 'light-transparent')
    {
+        header('Content-Security-Policy: frame-ancestors https://* http://*');
+
        self::triggerWebpageHit($this->episode->podcast_id);

        $session = \Config\Services::session();