X-Frame-Options are now set to SAMEORIGIN, to allow displaying tools like Laravel Telescope in frames

madsem · madsem · commit 7dd5deeb1585 · 2021-06-10T09:25:29.000+02:00
diff --git a/src/docker/nginx/nginx.conf b/src/docker/nginx/nginx.conf
@@ -106,7 +106,7 @@ http {
   # Add X-Frame-Options for HTML documents.
   # h5bp/security/x-frame-options.conf
   map $sent_http_content_type $x_frame_options {
-    ~*text/html DENY;
+    ~*text/html SAMEORIGIN;
   }
 
   # Add Content-Security-Policy for HTML documents.

Original file line number	Diff line number	Diff line change
`@@ -106,7 +106,7 @@ http {`
`106`	`106`	`# Add X-Frame-Options for HTML documents.`
`107`	`107`	`# h5bp/security/x-frame-options.conf`
`108`	`108`	`map $sent_http_content_type $x_frame_options {`
`109`		`- ~*text/html DENY;`
	`109`	`+ ~*text/html SAMEORIGIN;`
`110`	`110`	`}`
`111`	`111`
`112`	`112`	`# Add Content-Security-Policy for HTML documents.`