Merge pull request #23469 from github/repo-sync

repo sync
github · Jan 24, 2023 · 79f3efd · 79f3efd
2 parents 9ea0b9d + 0ffbb52
commit 79f3efd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/middleware/helmet.js b/middleware/helmet.js
@@ -40,7 +40,7 @@ const DEFAULT_OPTIONS = {
         isDev && 'http://localhost:3000',
         'https://www.youtube-nocookie.com',
       ].filter(Boolean),
-      frameAncestors: [...GITHUB_DOMAINS],
+      frameAncestors: isDev ? ['*'] : [...GITHUB_DOMAINS],
       styleSrc: ["'self'", "'unsafe-inline'", 'data:', AZURE_STORAGE_URL],
       childSrc: ["'self'"], // exception for search in deprecated GHE versions
       upgradeInsecureRequests: isDev ? null : [],