fix(main): filter out frame-ancestors if exists in Content-Security-P…

…olicy
jitsi · Jan 3, 2024 · c81e79c · c81e79c
1 parent 63d3bca
commit c81e79c
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/main.js b/main.js
@@ -272,6 +272,15 @@ function createJitsiMeetWindow() {
             details.responseHeaders['content-security-policy'] = [ cspFiltered ];
         }
 
+        if (details.responseHeaders['Content-Security-Policy']) {
+            const cspFiltered = details.responseHeaders['Content-Security-Policy'][0]
+                .split(';')
+                .filter(x => x.indexOf('frame-ancestors') === -1)
+                .join(';');
+
+            details.responseHeaders['Content-Security-Policy'] = [ cspFiltered ];
+        }
+
         callback({
             responseHeaders: details.responseHeaders
         });