https://github.com/haxtheweb/issues/security/advisories/GHSA-54vw-f4xf-f92j

Author: btopro

src/app.js

@@ -27,6 +27,7 @@ var helmetPolicies = {
       defaultSrc: ["'self'", "data:", "https:"],
       objectSrc: ["'none'"],
       fontSrc: ["'self'", "data:", "fonts.gstatic.com"],
+      frameAncestors: ["'self'"],
     },
   },
   referrerPolicy: {