fix(site): set Content-Security-Policy to allow loading in Storybook (#…

…778)
ithaka · Jul 19, 2024 · 5fc4213 · 5fc4213
1 parent f19a406
commit 5fc4213
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/.changeset/weak-scissors-vanish.md b/.changeset/weak-scissors-vanish.md
@@ -0,0 +1,5 @@
+---
+'@ithaka/pharos-site': patch
+---
+
+Set Content-Security-Policy to allow iframes in storybook
diff --git a/packages/pharos-site/gatsby-config.js b/packages/pharos-site/gatsby-config.js
@@ -12,6 +12,17 @@ module.exports = {
     siteUrl: 'https://pharos.jstor.org',
   },
   trailingSlash: 'never',
+  headers: [
+    {
+      source: 'pharos.jstor.org',
+      headers: [
+        {
+          key: 'Content-Security-Policy',
+          value: "default-src 'self' jstor.org *.jstor.org",
+        },
+      ],
+    },
+  ],
   plugins: [
     `gatsby-plugin-react-helmet`,
     {