middleware change

This commit is contained in:
Max Peintner
2025-06-27 11:15:51 +02:00
parent 1fa10d411a
commit ff29ab834b

View File

@@ -56,18 +56,16 @@ export async function middleware(request: NextRequest) {
securitySettings = await loadSecuritySettings(request); securitySettings = await loadSecuritySettings(request);
if (securitySettings?.embeddedIframe?.enabled) { if (securitySettings?.embeddedIframe?.enabled) {
const responseHeaders = new Headers(); const response = NextResponse.next({
request: { headers: requestHeaders },
});
responseHeaders.set( response.headers.set(
"Content-Security-Policy", "Content-Security-Policy",
`${DEFAULT_CSP} frame-ancestors ${securitySettings.embeddedIframe.allowedOrigins.join(" ")};`, `${DEFAULT_CSP} frame-ancestors ${securitySettings.embeddedIframe.allowedOrigins.join(" ")};`,
); );
responseHeaders.delete("X-Frame-Options"); response.headers.delete("X-Frame-Options");
return response;
return NextResponse.next({
request: { headers: requestHeaders },
headers: responseHeaders,
});
} }
} }