Fix logic

This commit is contained in:
Thomas Zarebczan 2022-03-03 10:23:40 -05:00
parent 66e0b84e12
commit 71589721ef
No known key found for this signature in database
GPG key ID: 767B41E1BB7346F2

View file

@ -6,7 +6,7 @@ async function iframeDestroyerMiddleware(ctx, next) {
} = ctx;
const decodedPath = decodeURIComponent(path);
if (!decodedPath.startsWith(`/$/${PAGES.EMBED}`) || !decodedPath.startsWith(`/$/api/content/v1/get`)) {
if (!(decodedPath.startsWith(`/$/${PAGES.EMBED}`) || decodedPath.startsWith(`/$/api/content/v1/get`))) {
ctx.set('X-Frame-Options', 'DENY');
}