diff --git a/src/main/java/com/budwk/app/web/commons/proc/CspProcessor.java b/src/main/java/com/budwk/app/web/commons/proc/CspProcessor.java index afdb45c..6dfdcd2 100644 --- a/src/main/java/com/budwk/app/web/commons/proc/CspProcessor.java +++ b/src/main/java/com/budwk/app/web/commons/proc/CspProcessor.java @@ -31,8 +31,8 @@ public class CspProcessor extends AbstractProcessor { "img-src 'self' data: https:; " + "font-src * data:; " + "connect-src 'self' https:; " + - "frame-ancestors 'none'; " + - "object-src 'none';"; + "frame-ancestors 'self'; " + + "object-src 'self';"; ac.getResponse().setHeader("Content-Security-Policy", csp);