Files
vscode/cli/src/commands
Connor PeetandCopilot 0a289c3721 cli: add frame-ancestors header to serve-web responses (#332654)
Adds Content-Security-Policy frame-ancestors 'self' and X-Frame-Options
SAMEORIGIN on all serve-web HTTP responses. Same-origin iframes continue
to work.

- Appends a CSP frame-ancestors 'self' directive on each response
- Sets X-Frame-Options SAMEORIGIN on each response

(Commit message generated by Copilot)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-08-26 00:04:15 +00:00
..
2026-05-13 15:11:50 -07:00