fix: add ngrok domains to frame-ancestors CSP
Browse files- src/hooks.server.ts +2 -0
- svelte.config.js +2 -0
src/hooks.server.ts
CHANGED
|
@@ -292,6 +292,8 @@ export const handle: Handle = async ({ event, resolve }) => {
|
|
| 292 |
"https://*.hf.space",
|
| 293 |
"http://localhost:*",
|
| 294 |
"http://127.0.0.1:*",
|
|
|
|
|
|
|
| 295 |
];
|
| 296 |
response.headers.append(
|
| 297 |
"Content-Security-Policy",
|
|
|
|
| 292 |
"https://*.hf.space",
|
| 293 |
"http://localhost:*",
|
| 294 |
"http://127.0.0.1:*",
|
| 295 |
+
"https://*.ngrok-free.dev",
|
| 296 |
+
"https://*.ngrok.io",
|
| 297 |
];
|
| 298 |
response.headers.append(
|
| 299 |
"Content-Security-Policy",
|
svelte.config.js
CHANGED
|
@@ -45,6 +45,8 @@ const config = {
|
|
| 45 |
"https://*.hf.space",
|
| 46 |
"http://localhost:*",
|
| 47 |
"http://127.0.0.1:*",
|
|
|
|
|
|
|
| 48 |
]
|
| 49 |
: ["'none'"],
|
| 50 |
},
|
|
|
|
| 45 |
"https://*.hf.space",
|
| 46 |
"http://localhost:*",
|
| 47 |
"http://127.0.0.1:*",
|
| 48 |
+
"https://*.ngrok-free.dev",
|
| 49 |
+
"https://*.ngrok.io",
|
| 50 |
]
|
| 51 |
: ["'none'"],
|
| 52 |
},
|