Merge pull request #608 from docat-org/fix/607-iframing-allowed

Fix: Iframing allowed, restrict frame-ancestors to self

Author: reglim

docat/docat/nginx/default

@@ -8,6 +8,7 @@ server {
 
     root /var/www/html;
 
+    add_header Content-Security-Policy "frame-ancestors 'self';";
     index index.html index.htm index.pdf /index.html;
 
     server_name _;