Support frame-ancestors directive

[ivy-rew]

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors

[ivy-rew]

The HTTP Content-Security-Policy (CSP) frame-ancestors directive specifies valid parents that may embed a page using , <iframe>, , , or .

[dsebastien]

Hello @ivy-rew. FYI we've just forked this repository in order to build upon the work that was already done.
Our goal is to add full support for CSP Level 3: https://github.com/NationalBankBelgium/ContentSecurityPolicyFilter

[ivy-rew]

I'm not investing any further on this filter, since we're setting headers like these on an NGINX revers proxy nowadays.
However, if anyone is trying to build the commit; I've just resurrected it here : https://github.com/ivy-rew/ContentSecurityPolicyFilter/commits/master/