mirror of
https://github.com/HeyPuter/puter
synced 2024-11-14 22:06:00 +00:00
try cross-origin isolation only on sites
This commit is contained in:
parent
7043b9400c
commit
e58da265ba
@ -392,7 +392,7 @@ class WebServerService extends BaseService {
|
||||
// NOTE: This is put behind a configuration flag because we
|
||||
// need some experimentation to ensure the interface
|
||||
// between apps and Puter doesn't break.
|
||||
if ( config.cross_origin_isolation ) {
|
||||
if ( config.cross_origin_isolation && is_site ) {
|
||||
res.setHeader('Cross-Origin-Opener-Policy', 'same-origin');
|
||||
res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp');
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user