fix(csp): remove illegal characters in directive names (#1585)

2024-02-08 17:41:33 +01:00
parent 24451892ff
commit 8c936a91be
1 changed files with 1 additions and 1 deletions
--- a/packages/backend/src/helpers/web-ui-handler.js
+++ b/packages/backend/src/helpers/web-ui-handler.js
@@ -15,7 +15,7 @@ const webUIHandler = async (app) => {
  app.use(express.static(webBuildPath));

  app.get('*', (_req, res) => {
-    res.set('Content-Security-Policy', 'frame-ancestors: none;');
+    res.set('Content-Security-Policy', 'frame-ancestors \'none\';');
    res.set('X-Frame-Options', 'DENY');

    res.sendFile(indexHtml);