Info about additional HTTP header

1 files changed, 7 insertions, 0 deletions

diff --git a/README.md b/README.md
index dae68f9..cb25b32 100644
--- a/README.md
+++ b/README.md
@@ -57,6 +57,13 @@ location /external_api.js {
 }
 ```
 
+The following additional HTTP header are known not work with the Electron App:
+
+```
+Content-Security-Policy "frame-ancestors 'none'";
+X-Frame-Options "DENY";
+```
+
 ## Development
 
 If you want to hack on this project, here is how you do it.