Merge pull request #15 from kyleconroy/kjc-remove-csp-policy

Don't add CSP header when disallowing framing.
2015-09-20 13:12:55 -07:00
parent afa1246584 06ce45692d
commit 90de3f9130
1 changed files with 0 additions and 1 deletions
--- a/infrastructure/framework-src/modules/global/response.js
+++ b/infrastructure/framework-src/modules/global/response.js
@@ -342,7 +342,6 @@ response.setGzip = function(gzip) {

 response.disallowFraming = function() {
  response.setHeader('X-Frame-Options', 'SAMEORIGIN');
-  response.addHeader('Content-Security-Policy', "frame-ancestors 'self'");
 }

 response.allowFraming = function() {