Files
school_compare/.playwright-mcp/console-2026-07-02T20-58-15-501Z.log
TudorandClaude Opus 4.8 9556595800
PR Checks / Frontend Typecheck + Tests (pull_request) Successful in 1m2s
PR Checks / Backend Smoke (pull_request) Successful in 7s
PR Checks / Build Backend (no push) (pull_request) Successful in 11s
PR Checks / Build Frontend (no push) (pull_request) Successful in 48s
PR Checks / Build Pipeline (no push) (pull_request) Successful in 10s
PR Checks / AI Code Review (Claude) (pull_request) Successful in 8s
feat(security): allow analytics subdomain to iframe the site
Replace X-Frame-Options: SAMEORIGIN with a CSP frame-ancestors directive
so analytics.schoolcompare.co.uk (Umami heatmap/recorder) can embed the
site while all other origins stay blocked. X-Frame-Options cannot allow a
specific sibling subdomain (ALLOW-FROM is deprecated/ignored by modern
browsers), so frame-ancestors is the correct replacement.

Also update the nginx snippet in DEPLOYMENT.md to match, so the reverse
proxy doesn't re-inject a conflicting X-Frame-Options header.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-21 22:50:44 +01:00

5 lines
1.3 KiB
Plaintext

[ 3285ms] [WARNING] The resource https://schoolcompare.co.uk/_next/static/chunks/14a927d6c03d3a7e.css was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally. @ https://schoolcompare.co.uk/:0
[ 13107ms] [WARNING] The resource https://schoolcompare.co.uk/_next/static/chunks/14a927d6c03d3a7e.css was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally. @ https://schoolcompare.co.uk/:0
[ 33154ms] [WARNING] The resource https://schoolcompare.co.uk/_next/static/chunks/14a927d6c03d3a7e.css was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally. @ https://schoolcompare.co.uk/:0
[ 37100ms] [WARNING] The resource https://schoolcompare.co.uk/_next/static/chunks/14a927d6c03d3a7e.css was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally. @ https://schoolcompare.co.uk/:0