LLL Frame Embedding Policy Builder / 埋め込み元の設定
Create an exact frame-ancestors allowlist and compare one enforced Content-Security-Policy response header. 埋め込み元のCSPを作り現行値を比較。
@mrhandsome39.bsky.social/frame-embedding-policy-builderOr open Registry in your EmDash admin and search for this name.
Permissions
Plugins get only the capabilities they declare and you approve. Your EmDash admin lists these again before anything installs.
FAQ
The checker compares one enforced CSP response header and supports exact HTTPS origins, optional ports, 'self' and 'none'. Multiple policies, custom path and wildcard sources, and Report-Only headers need separate review. default-src is not a fallback for frame-ancestors. Apply the directive in a response header; a meta element cannot enforce it. W3C CSP
Security
Administrator use only. The plugin requests no capabilities, saves nothing, applies nothing and makes no outbound requests. Email contact@lx3.cafe to report an issue.
Changelog
0.1.0
Create and compare a bounded frame-ancestors directive.
Installation
Install LLL Frame Embedding Policy Builder in EmDash 1.4. Open the administrator page, choose an embedding policy and enter the trusted HTTPS origins when needed. Optionally paste the one enforced CSP response header you observed. Copy the directive and update your hosting configuration, preserving any other policies and directives. Confirm the site embeds successfully from every intended parent frame.
Keep exploring
More plugins like LLL Frame Embedding Policy Builder / 埋め込み元の設定
Browse by keyword, or see everything @mrhandsome39.bsky.social publishes.