kiwix-js-pwa/docker/secure_origin.conf
Jaifroid 5fab90f9c7 Revert cross-origin headers
Former-commit-id: 4e36f53b5a7dbb0d5ab9d99bbe26a97f340edd5a
2022-12-06 16:30:11 +00:00

6 lines
348 B
Plaintext

# Use these directives to add security. Unfortunately, they don't currently appear to work with our implementation
# They block programmatic access to the iframe completely!
# add_header Cross-Origin-Embedder-Policy require-corp;
# add_header Cross-Origin-Opener-Policy same-origin;
# add_header Access-Control-Allow-Origin: https://pwa.kiwix.org;