fix(main): filter out frame-ancestors if exists in Content-Security-Policy

1 files changed, 9 insertions, 0 deletions

diff --git a/main.js b/main.js
index 194ea5a..4afb853 100644
--- a/main.js
+++ b/main.js
@@ -272,6 +272,15 @@ function createJitsiMeetWindow() {
             details.responseHeaders['content-security-policy'] = [ cspFiltered ];
         }
 
+        if (details.responseHeaders['Content-Security-Policy']) {
+            const cspFiltered = details.responseHeaders['Content-Security-Policy'][0]
+                .split(';')
+                .filter(x => x.indexOf('frame-ancestors') === -1)
+                .join(';');
+
+            details.responseHeaders['Content-Security-Policy'] = [ cspFiltered ];
+        }
+
         callback({
             responseHeaders: details.responseHeaders
         });