3252a8 f416b0aed1 fix(webapp): allow oauth.telegram.org iframe in CSP ...

The Telegram Login Widget embeds oauth.telegram.org in an iframe; without
an explicit frame-src directive it fell back to default-src 'self' and was
blocked. Add frame-src https://oauth.telegram.org so the login flow loads.

2026-04-27 09:34:09 +03:00

..

controllers

channel require and db update

2025-10-17 09:36:25 +03:00

factories

remove nalogo and use custom client

2026-01-17 21:58:12 +03:00

web

fix(webapp): allow oauth.telegram.org iframe in CSP

2026-04-27 09:34:09 +03:00