diff --git a/config/seckit.settings.yml b/config/seckit.settings.yml index f0dedc4d..e4836dc8 100644 --- a/config/seckit.settings.yml +++ b/config/seckit.settings.yml @@ -13,7 +13,7 @@ seckit_xss: style-src: "'self' 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com fonts.googleapis.com https://www.google.com" img-src: "'self' data: https://*" media-src: "'none'" - frame-src: "'self' https://www.googletagmanager.com https://bid.g.doubleclick.net https://td.doubleclick.net" + frame-src: "'self' https://www.googletagmanager.com https://bid.g.doubleclick.net https://td.doubleclick.net *.un.org https://cdnapisec.kaltura.com" frame-ancestors: "'self'" child-src: "'self'" font-src: "'self' data: fonts.gstatic.com"