What’s the difference between frame-ancestors and child-src?
Both options seem to control who can embed the content in an <iframe> tag, just like X-Frame-Options does. Chrome and Safari are deprecating this header (partially, allow-from for instance), so it’s a matter of time tha… Continue reading What’s the difference between frame-ancestors and child-src?