update

2026-04-21 10:05:37 +02:00
parent de8a7284d0
commit 7bf1e0dbb2
2 changed files with 110 additions and 23 deletions
--- a/2026/empfang_routes.py
+++ b/2026/empfang_routes.py
@@ -2196,7 +2196,12 @@ async def empfang_page(request: Request):
    if html_path.is_file():
        return HTMLResponse(
            content=html_path.read_text(encoding="utf-8"),
-            headers={"Cache-Control": "no-cache, no-store, must-revalidate",
-                     "Pragma": "no-cache", "Expires": "0"},
+            headers={
+                "Cache-Control": "no-cache, no-store, must-revalidate",
+                "Pragma": "no-cache",
+                "Expires": "0",
+                # Desktop-Huelle (iframe-Modus): erlaubt Einbettung aus pywebview/null-Origin
+                "Content-Security-Policy": "frame-ancestors *;",
+            },
        )
    return HTMLResponse(content="<h1>empfang.html nicht gefunden</h1>", status_code=404)