diff options
author | Bernhard Posselt <BernhardPosselt@users.noreply.github.com> | 2016-01-28 09:34:14 +0100 |
---|---|---|
committer | Bernhard Posselt <BernhardPosselt@users.noreply.github.com> | 2016-01-28 09:34:14 +0100 |
commit | 26d2c9fbb951a763fe8370af185c3fba18f5904d (patch) | |
tree | 11849f90b76ac607248f9332f6cc360cf4d444f4 /controller | |
parent | b3a7f20a6cf7b09103da7bf15ce89221937ab529 (diff) | |
parent | 02aa90b6b03e3043a845598c2d1a8d6956e4d01c (diff) |
Merge pull request #917 from rakshazi/patch-1
Added vk.com to allowed iframe domains list
Diffstat (limited to 'controller')
-rw-r--r-- | controller/pagecontroller.php | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/controller/pagecontroller.php b/controller/pagecontroller.php index 5c2f07565..fab68b3d9 100644 --- a/controller/pagecontroller.php +++ b/controller/pagecontroller.php @@ -82,7 +82,9 @@ class PageController extends Controller { ->addAllowedFrameDomain('https://youtube.com') ->addAllowedFrameDomain('https://www.youtube.com') ->addAllowedFrameDomain('https://player.vimeo.com') - ->addAllowedFrameDomain('https://www.player.vimeo.com'); + ->addAllowedFrameDomain('https://www.player.vimeo.com') + ->addAllowedFrameDomain('https://vk.com') + ->addAllowedFrameDomain('https://www.vk.com'); $response->setContentSecurityPolicy($csp); return $response; |