chore: Add more permitted iframe domains to RWR.

Refs: RWR-440
UN-OCHA · May 29, 2024 · 89c8780 · 89c8780
1 parent fdb87a0
commit 89c8780
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/seckit.settings.yml b/config/seckit.settings.yml
@@ -13,7 +13,7 @@ seckit_xss:
     style-src: "'self' 'unsafe-inline' fonts.googleapis.com https://cdnjs.cloudflare.com"
     img-src: "'self' data: https://*.google-analytics.com https://*.googletagmanager.com gstatic.com ytimg.com reliefweb.int"
     media-src: "'none'"
-    frame-src: "'self'  https://flo.uri.sh https://api.mapbox.com https://app.powerbi.com https://data.humdata.org https://drive.google.com https://www.youtube.com https://datawrapper.dwcdn.net https://teamup.com https://lookerstudio.google.com"
+    frame-src: "'self'  https://flo.uri.sh https://api.mapbox.com https://app.powerbi.com https://data.humdata.org https://drive.google.com https://www.youtube.com https://datawrapper.dwcdn.net https://teamup.com https://lookerstudio.google.com https://experience.arcgis.com"
     frame-ancestors: "'self'"
     child-src: "'self'"
     font-src: "'self' data: fonts.gstatic.com"