Trying to iframe external content https://brainstormforce.github.io/
-
I am seeing an attempt to iframe https://brainstormforce.github.io/cross-site-cp-helper.min.js?ver=2.0.4
into my site. I block this w/ content-security policy so it causes failure:
Refused to frame ‘https://brainstormforce.github.io/’ because it violates the following Content Security Policy directive: “frame-src ‘self’
What is going on here? this is not legal, why would you be injecting content into my site like this? How can i remove this critical security flaw?
(This is occuring when pasting into the media library).
Viewing 4 replies - 1 through 4 (of 4 total)
Viewing 4 replies - 1 through 4 (of 4 total)
- The topic ‘Trying to iframe external content https://brainstormforce.github.io/’ is closed to new replies.