Merge pull request #1965 from heatmiser/nginx-csp-frame-ancestors

Replace add_header X-Frame-Options DENY with CSP frame-ancestors self in automation-controller.nginx.conf

Author: IPvSean

roles/code_server/tasks/codeserver_always.yml

@@ -1,4 +1,18 @@
 ---
+- name: Replace add_header X-Frame-Options DENY with CSP frame-ancestors self in automation-controller.nginx.conf
+  ansible.builtin.lineinfile:
+    path: /etc/nginx/conf.d/automation-controller.nginx.conf
+    regexp: '^(.*)add_header X-Frame-Options \"DENY\"\;'
+    line: >-
+      \1add_header Content-Security-Policy "frame-ancestors 'self';";
+    backrefs: yes
+    owner: root
+    group: root
+    mode: '0644'
+  register: add_header_csp
+  retries: 10
+  until: add_header_csp is not changed
+
 - name: Apply our systemd service file (instead of RPM file)
   ansible.builtin.template:
     src: code-server.service.j2
@@ -12,4 +26,4 @@
     name: code-server
     enabled: true
     state: restarted
-    daemon_reload: true
+    daemon_reload: true