diff --git a/production/nginx.conf b/production/nginx.conf index edbb0fdad..141e43622 100644 --- a/production/nginx.conf +++ b/production/nginx.conf @@ -148,12 +148,12 @@ http { if ($http_referer ~ ^https://mempool.space/) { set $frameOptions "ALLOW-FROM https://mempool.space"; - set $contentSecurityPolicy "ALLOW-FROM https://mempool.space"; + set $contentSecurityPolicy "frame-ancestors https://mempool.space"; } if ($http_referer ~ ^https://wiz.biz/) { set $frameOptions "ALLOW-FROM https://wiz.biz"; - set $contentSecurityPolicy "ALLOW-FROM https://wiz.biz"; + set $contentSecurityPolicy "frame-ancestors https://wiz.biz"; } add_header X-Frame-Options $frameOptions;