Fix clickjacking (#6185)
* fix(server): clickjacking * fix(XSS.ts): handle CSV and null values in getAllowedIframeOrigins
Y
yau-wd committed
311a3f47d05b6fe0fae9e5390afcd007be34c981
Parent: 4114b3b
Committed by GitHub <noreply@github.com>
on 4/14/2026, 12:23:00 PM