calmPress / calmpress

A modern CMS based on WordPress
https://calmpress.org/
22 stars 1 forks source link

Add trusted domains for which cors and CSP can be relaxed. #335

Open markkap opened 3 years ago

markkap commented 3 years ago

Sometime the same organization operates several domains and wish to share some HTML (as an iframe)/js/css between the sites. By default this kind of sharing is not allowed.

Add an option to relax the restrictions for specific domains that should be able to embed iframes from the site or send XHR.