internalunsafeframing

Documentation

Overview

Package internalunsafeframing is used internally to override Framing protections.

Index

• type AllowList
• type Disable

Types

type AllowList

type AllowList struct {
	// ReportOnly sets the policy to Report-Only instead of enforcing.
	ReportOnly bool
	// Hostnames is a list of origins (with potential wildcards) that will be able to frame the site.
	// Wildcards must follow the CSP specification:
	// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors.
	Hostnames []string
}

AllowList selectively allows framing.

Please note that on older browsers this is equivalent to Disable.

type Disable

type Disable struct {
	// SkipReports completely disables framing protectcion.
	SkipReports bool
}

Disable turns framing protection to report-only where possible.