Adding CSP for iframes to allow src from OSM

This commit is contained in:
collin 2026-04-20 22:21:16 +02:00
parent e4930efff9
commit f222a2e2c5

View file

@ -30,6 +30,7 @@ func getStaticFile(relPath string, contentType string, w http.ResponseWriter) {
} }
w.Header().Add("Content-Type", contentType) w.Header().Add("Content-Type", contentType)
w.Header().Add("Content-Security-Policy", "default-src 'self'; frame-src: 'self' openstreetmap.org")
w.WriteHeader(http.StatusOK) w.WriteHeader(http.StatusOK)
w.Write(file) w.Write(file)
} }