- 已装运
- 2026年4月17日 18:53 UTC
- 作者
- Kamo
- 提交
- 5d8e6a3
Add security-headers-allow-iframe (no X-Frame-Options) and kamo-middlewares-allow-iframe chain so analytics can be embedded in iframes from internal.kamocrm.com. The CSP frame-ancestors directive in the app itself controls which origins are allowed.