Adjustment to CSP for embed form (#14)

MetaProvide · Jul 25, 2022 · 93465e4 · 93465e4
1 parent 20d37a1
commit 93465e4
Showing 1 changed file with 5 additions and 11 deletions.
diff --git a/lib/Controller/PageController.php b/lib/Controller/PageController.php
@@ -175,18 +175,12 @@ public function cncfEmb() {
     }
 
     function setEmbCsp($tr, $userId) {
-
-        $ad = $this->c->getAppValue(
-            $this->appName,
-            'emb_afad_' . $userId);
-        if (strlen($ad) > 3) {
-            $csp = $tr->getContentSecurityPolicy();
-            if ($csp === null) {
-                $csp = new ContentSecurityPolicy();
-                $tr->setContentSecurityPolicy($csp);
-            }
-            $csp->addAllowedFrameAncestorDomain($ad);
+        $csp = $tr->getContentSecurityPolicy();
+        if ($csp === null) {
+            $csp = new ContentSecurityPolicy();
+            $tr->setContentSecurityPolicy($csp);
         }
+        $csp->addAllowedFrameAncestorDomain("'*'");
     }
 
     // ---- END EMBEDDABLE -----