From bc612ddf8192057e587f3880a64a70bf513ac628 Mon Sep 17 00:00:00 2001 From: Dmitry Verkhoturov Date: Thu, 4 Dec 2025 13:39:18 +0100 Subject: [PATCH] Remove redundant frame ancestors log from middleware The log message was printed on every request when allowed ancestors were configured, creating unnecessary noise in the logs. --- backend/app/rest/api/rest.go | 1 - 1 file changed, 1 deletion(-) diff --git a/backend/app/rest/api/rest.go b/backend/app/rest/api/rest.go index 4d64ee26..f351dffb 100644 --- a/backend/app/rest/api/rest.go +++ b/backend/app/rest/api/rest.go @@ -628,7 +628,6 @@ func securityHeadersMiddleware(imageProxyEnabled bool, allowedAncestors []string } frameAncestors := "*" if len(allowedAncestors) > 0 { - log.Printf("[INFO] frame embedding allowed from %+v only", allowedAncestors) frameAncestors = strings.Join(allowedAncestors, " ") } w.Header().Set("Content-Security-Policy", fmt.Sprintf("default-src 'none'; base-uri 'none'; form-action 'none'; connect-src 'self'; frame-src 'self' mailto:; img-src %s; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src data:; object-src 'none'; frame-ancestors %s;", imgSrc, frameAncestors))