Merge remote-tracking branch 'origin/dev' into task/system-text-json-…

…migration
Lombiq · Sep 23, 2024 · eaa1424 · eaa1424
2 parents 3a0bee1 + 050e2af
commit eaa1424
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/Lombiq.HelpfulLibraries.OrchardCore/Security/ReCaptchaContentSecurityPolicyProvider.cs b/Lombiq.HelpfulLibraries.OrchardCore/Security/ReCaptchaContentSecurityPolicyProvider.cs
@@ -17,8 +17,11 @@ public async ValueTask UpdateAsync(IDictionary<string, string> securityPolicies,
 
         if (await shellFeaturesManager.IsFeatureEnabledAsync("OrchardCore.ReCaptcha"))
         {
-            CspHelper.MergeValues(securityPolicies, ScriptSrc, "www.google.com", "www.gstatic.com");
-            CspHelper.MergeValues(securityPolicies, FrameSrc, "www.google.com");
+            const string googleDotCom = "www.google.com";
+
+            CspHelper.MergeValues(securityPolicies, ScriptSrc, googleDotCom, "www.gstatic.com");
+            CspHelper.MergeValues(securityPolicies, FrameSrc, googleDotCom);
+            CspHelper.MergeValues(securityPolicies, FrameAncestors, googleDotCom);
         }
     }
 }