diff --git a/apps/dashboard/next.config.ts b/apps/dashboard/next.config.ts index f5b13c2bcdd..759626f4afe 100644 --- a/apps/dashboard/next.config.ts +++ b/apps/dashboard/next.config.ts @@ -16,6 +16,7 @@ const ContentSecurityPolicy = ` connect-src * data: blob:; worker-src 'self' blob:; block-all-mixed-content; + frame-ancestors 'self' https://farcaster.xyz https://*.farcaster.xyz; `; const securityHeaders = [ @@ -29,8 +30,7 @@ const securityHeaders = [ }, { key: "X-Frame-Options", - // allow farcaster.xyz as a frame ancestor for the browser mini app - value: "frame-ancestors 'self' https://farcaster.xyz; default 'self'", + value: "SAMEORIGIN", }, { key: "Referrer-Policy",