maziggy 4e83751f71 fix(auth): let the connected-app consent page load inside Bambuddy's own frames ...

An app opened from the sidebar signs in inside Bambuddy's iframe, but every
page sent frame-ancestors 'none', so the browser refused to show
/connect/authorize there. That path now gets 'self', like the streaming
overlay: every ancestor must be Bambuddy itself, so foreign pages still
cannot frame it.

2026-09-26 13:37:02 +02:00

..

app

fix(auth): let the connected-app consent page load inside Bambuddy's own frames

2026-09-26 13:37:02 +02:00

tests

fix(auth): let the connected-app consent page load inside Bambuddy's own frames

2026-09-26 13:37:02 +02:00

__init__.py

…