Dissociate frameguard from csp

1 files changed, 5 insertions, 0 deletions

diff --git a/config/default.yaml b/config/default.yaml
index f9b6c50a3..281cc0577 100644
--- a/config/default.yaml
+++ b/config/default.yaml
@@ -153,6 +153,11 @@ csp:
   report_only: true # CSP directives are still being tested, so disable the report only mode at your own risk!
   report_uri:
 
+security:
+  # Set the X-Frame-Options header to help to mitigate clickjacking attacks
+  frameguard:
+    enabled: true
+
 tracker:
   # If you disable the tracker, you disable the P2P aspect of PeerTube
   enabled: true