Merge branch 'ah/bc-user-settings' into staging

system76 · Feb 13, 2024 · 2ea143a · 2ea143a
2 parents 1db6b7a + 6d64190
commit 2ea143a
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/lib/recognizer_web/controllers/accounts/user_settings_controller.ex b/lib/recognizer_web/controllers/accounts/user_settings_controller.ex
@@ -10,7 +10,12 @@ defmodule RecognizerWeb.Accounts.UserSettingsController do
     if Application.get_env(:recognizer, :redirect_url) && !get_session(conn, :bc) do
       redirect(conn, external: Application.get_env(:recognizer, :redirect_url))
     else
-      render(conn, "edit.html")
+      conn
+      |> put_resp_header(
+        "Content-Security-Policy",
+        "default-src 'self'; frame-ancestors 'self' https://bigcommerce.com;"
+      )
+      |> render("edit.html")
     end
   end