allow iframes for notes

packages/backend/src/server/api/endpoints/antennas/create.ts

@@ -107,10 +107,9 @@ export default define(meta, paramDef, async (ps, user) => {
 		userId: user.id,
 	});
 	if (antennas.length > 5 && !user.isAdmin) {
-		throw new ApiError(meta.errors.tooManyAntennas)
+		throw new ApiError(meta.errors.tooManyAntennas);
 	}
 
-
 	if (ps.src === "list" && ps.userListId) {
 		userList = await UserLists.findOneBy({
 			id: ps.userListId,

packages/backend/src/server/web/index.ts

@@ -422,6 +422,10 @@ router.get("/notes/:note", async (ctx, next) => {
 			});
 
 			ctx.set("Cache-Control", "public, max-age=15");
+			ctx.set(
+				"Content-Security-Policy",
+				"default-src 'self'; frame-ancestors '*'",
+			);
 
 			return;
 		}

rome.json

@@ -13,7 +13,7 @@
 			"packages/*/package-lock.json",
 			"packages/backend/src/server/web/manifest.ts",
 			"packages/backend/built/",
-			"packages/backend/nsfw-model/",
+			"*/model.json",
 			"packages/client/src/emojilist.json",
 			"*.md",
 			"**/tsconfig.json",