feat: added content-security-policy meta tag at the top

openedx-unsupported · Jul 20, 2023 · f0017e3 · f0017e3
1 parent 024a793
commit f0017e3
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/public/index.html b/public/index.html
@@ -5,6 +5,7 @@
     <link rel="preconnect" href="<%= preconnectURL %>" />
     <% }); %>
     <title>Payment | edX</title>
+    <meta http-equiv="Content-Security-Policy" content="frame-src 'self' https://js.stripe.com https://hooks.stripe.com;"/>
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <link rel="shortcut icon" href="<%=htmlWebpackPlugin.options.FAVICON_URL%>" type="image/x-icon" />