From 8155db669baff9aac5617a7aaf68dd35823ed7c9 Mon Sep 17 00:00:00 2001
From: Chocobozzz <me@florianbigard.com>
Date: Mon, 12 Apr 2021 15:33:54 +0200
Subject: Dissociate frameguard from csp

---
 config/production.yaml.example | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'config/production.yaml.example')

diff --git a/config/production.yaml.example b/config/production.yaml.example
index f2e75af32..fed6b45ca 100644
--- a/config/production.yaml.example
+++ b/config/production.yaml.example
@@ -151,6 +151,11 @@ csp:
   report_only: true # CSP directives are still being tested, so disable the report only mode at your own risk!
   report_uri:
 
+security:
+  # Set the X-Frame-Options header to help to mitigate clickjacking attacks
+  frameguard:
+    enabled: true
+
 tracker:
   # If you disable the tracker, you disable the P2P aspect of PeerTube
   enabled: true
-- 
cgit v1.2.3