mirror of
https://github.com/microsoft/vscode.git
synced 2026-09-06 22:54:50 +01:00
Adds Content-Security-Policy frame-ancestors 'self' and X-Frame-Options SAMEORIGIN on all serve-web HTTP responses. Same-origin iframes continue to work. - Appends a CSP frame-ancestors 'self' directive on each response - Sets X-Frame-Options SAMEORIGIN on each response (Commit message generated by Copilot) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>