- Shipped
- 2026年4月17日 18:53 UTC
- Author
- Kamo
- Commit
- 5d8e6a3
Add security-headers-allow-iframe (no X-Frame-Options) and kamo-middlewares-allow-iframe chain so analytics can be embedded in iframes from internal.kamocrm.com. The CSP frame-ancestors directive in the app itself controls which origins are allowed.