From d56700cad490998a73f01a53c42c39421a8fc627 Mon Sep 17 00:00:00 2001
From: Stefan Kreutz <mail@skreutz.com>
Date: Tue, 24 Feb 2026 20:00:06 +0100
Subject: Extend Content-Security-Policy

---
 templates/default.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/templates/default.html b/templates/default.html
index 2c90301..e081344 100644
--- a/templates/default.html
+++ b/templates/default.html
@@ -2,7 +2,7 @@
 <html lang="en">
   <head>
     <meta charset="utf-8">
-    <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'self'; img-src 'self' data:">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'self'; img-src 'self' data:; frame-ancestors: 'none'; form-action: 'none'">
     <meta http-equiv="x-ua-compatible" content="ie=edge">
     <meta name="viewport" content="width=device-width, initial-scale=1">
     <meta name="author" content="Stefan Kreutz">
-- 
cgit v1.2.3

