Files
school_compare/.playwright-mcp/page-2026-07-06T10-37-50-339Z.yml
T
TudorandClaude Opus 4.8 9556595800
PR Checks / Frontend Typecheck + Tests (pull_request) Successful in 1m2s
PR Checks / Backend Smoke (pull_request) Successful in 7s
PR Checks / Build Backend (no push) (pull_request) Successful in 11s
PR Checks / Build Frontend (no push) (pull_request) Successful in 48s
PR Checks / Build Pipeline (no push) (pull_request) Successful in 10s
PR Checks / AI Code Review (Claude) (pull_request) Successful in 8s
feat(security): allow analytics subdomain to iframe the site
Replace X-Frame-Options: SAMEORIGIN with a CSP frame-ancestors directive
so analytics.schoolcompare.co.uk (Umami heatmap/recorder) can embed the
site while all other origins stay blocked. X-Frame-Options cannot allow a
specific sibling subdomain (ALLOW-FROM is deprecated/ignored by modern
browsers), so frame-ancestors is the correct replacement.

Also update the nginx snippet in DEPLOYMENT.md to match, so the reverse
proxy doesn't re-inject a conflicting X-Frame-Options header.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-21 22:50:44 +01:00

65 lines
2.7 KiB
YAML

- generic [active] [ref=f6e1]:
- link "Skip to main content" [ref=f6e2] [cursor=pointer]:
- /url: "#main-content"
- banner [ref=f6e3]:
- link "SchoolCompare home" [ref=f6e5] [cursor=pointer]:
- /url: /
- img [ref=f6e7]
- generic [ref=f6e11]: SchoolCompare
- navigation "Main navigation" [ref=f6e12]:
- link "Search" [ref=f6e13] [cursor=pointer]:
- /url: /
- img [ref=f6e15]
- generic [ref=f6e18]: Search
- link "2 selected Compare" [ref=f6e19] [cursor=pointer]:
- /url: /compare
- generic [ref=f6e20]:
- img [ref=f6e21]
- generic "2 selected" [ref=f6e24]: "2"
- generic [ref=f6e25]: Compare
- link "Rankings" [ref=f6e26] [cursor=pointer]:
- /url: /rankings
- img [ref=f6e28]
- generic [ref=f6e29]: Rankings
- link "Admissions" [ref=f6e30] [cursor=pointer]:
- /url: /admissions
- img [ref=f6e32]
- generic [ref=f6e35]: Admissions
- main [ref=f6e36]:
- generic [ref=f6e38]:
- heading "404" [level=1] [ref=f6e39]
- heading "This page could not be found." [level=2] [ref=f6e41]
- contentinfo [ref=f6e42]:
- generic [ref=f6e43]:
- generic [ref=f6e44]:
- generic [ref=f6e45]:
- heading "SchoolCompare" [level=3] [ref=f6e46]
- paragraph [ref=f6e47]: Compare primary and secondary schools across England.
- link "contact@schoolcompare.co.uk" [ref=f6e48] [cursor=pointer]:
- /url: mailto:contact@schoolcompare.co.uk
- generic [ref=f6e49]:
- heading "Product" [level=4] [ref=f6e50]
- list [ref=f6e51]:
- listitem [ref=f6e52]:
- link "Search schools" [ref=f6e53] [cursor=pointer]:
- /url: /
- listitem [ref=f6e54]:
- link "Rankings" [ref=f6e55] [cursor=pointer]:
- /url: /rankings
- listitem [ref=f6e56]:
- link "Compare shortlist" [ref=f6e57] [cursor=pointer]:
- /url: /compare
- listitem [ref=f6e58]:
- link "Admissions guide" [ref=f6e59] [cursor=pointer]:
- /url: /admissions
- generic [ref=f6e60]:
- heading "Resources" [level=4] [ref=f6e61]
- list [ref=f6e62]:
- listitem [ref=f6e63]:
- link "School Performance Tables" [ref=f6e64] [cursor=pointer]:
- /url: https://www.gov.uk/school-performance-tables
- listitem [ref=f6e65]:
- link "Ofsted reports" [ref=f6e66] [cursor=pointer]:
- /url: https://reports.ofsted.gov.uk/
- paragraph [ref=f6e68]: © 2026 SchoolCompare.co.uk
- alert [ref=f6e69]