Hello All,

I am serving static files from my app (for now) using express.

When app engine sends the response it attaches the following header:

content-security-policy: default-src 'self' frame-ancestors 'self' 
https://console.cloud.google.com https://*.corp.google.com:* 
http://*.corp.google.com:*


Which causes the following error:

The Content Security Policy directive 'default-src' contains 'frame-ancestors' 
as a source expression. Did you mean 'default-src ...; frame-ancestors...' 
(note the semicolon)?


I have no idea on how to amend this header unless I start playing with the 
Nginx config, which means I am may as well revert to using compute engine.

Can anyone provide any ideas on how I can solve this?

Stack: node, express, webpack4, vuejs.


-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/c9f9405d-53a8-41d3-bebb-28e36e0e8287%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
  • [google-appengine... 'Dennis Yurkevich' via Google App Engine

Reply via email to