Vishva/citpl_cms_react_express_postgres
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

correction files

Browse Source
This commit is contained in:
sandhiya-hepl
2026-07-16 14:06:16 +05:30
parent 5b27debfa8
commit f7ddd85de9
2 changed files with 10 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dist/.htaccess
Vendored
+2 -9
View File
@@ -11,18 +11,11 @@
RewriteRule ^uploads/(.*)$ http://127.0.0.1:3001/uploads/$1 [P,L]
</IfModule>
# Allow embedding from this site and https://demo.cavinkare.in/
# X-Frame-Options cannot allow a third origin - unset it and use CSP only.
# Force-remove any inherited CSP/XFO headers, then set our own.
<IfModule mod_headers.c>
Header always unset X-Frame-Options
Header unset X-Frame-Options
Header always edit Content-Security-Policy "frame-ancestors 'none'" "frame-ancestors 'self' https://demo.cavinkare.in/"
<FilesMatch "^(preview\.html|index\.html|admin\.html)$">
Header unset X-Frame-Options
Header always unset X-Frame-Options
Header unset Content-Security-Policy
Header always unset Content-Security-Policy
Header always set Content-Security-Policy "frame-ancestors 'self' https://demo.cavinkare.in/"
</FilesMatch>
Header always set Content-Security-Policy "frame-ancestors 'self' https://demo.cavinkare.in"
</IfModule>
public/.htaccess
+2 -9
View File
@@ -11,18 +11,11 @@
RewriteRule ^uploads/(.*)$ http://127.0.0.1:3001/uploads/$1 [P,L]
</IfModule>
# Allow embedding from this site and https://demo.cavinkare.in/
# X-Frame-Options cannot allow a third origin - unset it and use CSP only.
# Force-remove any inherited CSP/XFO headers, then set our own.
<IfModule mod_headers.c>
Header always unset X-Frame-Options
Header unset X-Frame-Options
Header always edit Content-Security-Policy "frame-ancestors 'none'" "frame-ancestors 'self' https://demo.cavinkare.in/"
<FilesMatch "^(preview\.html|index\.html|admin\.html)$">
Header unset X-Frame-Options
Header always unset X-Frame-Options
Header unset Content-Security-Policy
Header always unset Content-Security-Policy
Header always set Content-Security-Policy "frame-ancestors 'self' https://demo.cavinkare.in/"
</FilesMatch>
Header always set Content-Security-Policy "frame-ancestors 'self' https://demo.cavinkare.in"
</IfModule>