From 42da5b175e0165ca29e86c03fc26b571ff94fcb1 Mon Sep 17 00:00:00 2001 From: Callum Morris Date: Tue, 4 Aug 2026 14:35:25 +1200 Subject: [PATCH] feat: add women's refuge shielded site to CSP default frame-src To allow displaying the shielded portal in an iframe --- weft/handlers.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/weft/handlers.go b/weft/handlers.go index 88da5aa..191e4aa 100644 --- a/weft/handlers.go +++ b/weft/handlers.go @@ -64,7 +64,7 @@ var defaultCsp = map[string]string{ "style-src": "'self'", "script-src": "'self'", "connect-src": "'self' https://*.geonet.org.nz https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com", - "frame-src": "'self' https://www.youtube.com https://www.google.com", + "frame-src": "'self' https://www.youtube.com https://www.google.com https://staticcdn.co.nz", "form-action": "'self' https://*.geonet.org.nz", "base-uri": "'none'", "frame-ancestors": "'self'",