From 6b5c6bbff87e6498e22bd276d8fc3d15ee0600ac Mon Sep 17 00:00:00 2001
From: Prudhvi Godithi <pgodithi@amazon.com>
Date: Tue, 3 Sep 2024 12:41:06 -0700
Subject: [PATCH] Support central of the metrics (#70)

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>
---
 infrastructure/lib/stacks/opensearchNginxProxyReadonly.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/infrastructure/lib/stacks/opensearchNginxProxyReadonly.ts b/infrastructure/lib/stacks/opensearchNginxProxyReadonly.ts
index 506a30f..3456edd 100644
--- a/infrastructure/lib/stacks/opensearchNginxProxyReadonly.ts
+++ b/infrastructure/lib/stacks/opensearchNginxProxyReadonly.ts
@@ -176,6 +176,7 @@ export class OpenSearchMetricsNginxReadonly extends Stack {
                 add_header Strict-Transport-Security "max-age=47304000; includeSubDomains";
                 add_header X-Content-Type-Options "nosniff";
                 add_header X-Frame-Options "DENY";  
+                add_header Content-Security-Policy "frame-ancestors https://opensearch.org";
                 add_header Cache-Control "no-store, no-cache";
                 
                 set $os_endpoint ${nginxProps.opensearchDashboardUrlProps.opensearchDashboardVpcUrl};