frame-ancestor wildcard should not be quoted

materialscloud-org / voila-materialscloud-template

The Voila template for Materials Cloud.

Other

2 stars 3 forks source link

frame-ancestor wildcard should not be quoted #23

Closed CasperWA closed 4 years ago

CasperWA commented 4 years ago

The line:

https://github.com/materialscloud-org/voila-materialscloud-template/blob/46fbe8822463a9dfab85ff32d19c48af8a684240/Makefile#L33

Should not have the wildcard (*) enclosed in quotes. This is ignored by the browser and a wrong value for frame-ancestors (see Mozilla documentation).