Hey,
I am in need of having a Mastodon server installed/setup. Currently, I use service Masto.host.
I would like my Mastodon server to allow itself to be embedded into another website I currently have. With Masto.host service running my server I cannot embed my Mastodon into my other site because the X-frame-option detective is set to deny. How i can allow sites to embed my mastodon?
What I would like is to have the ability to be able to embed my Mastodon into the other site I own, but not allow it to be embedded into any other sites . I spoke with someone and they said the way I should do this is through “The HTTP Content-Security-Policy (CSP) frame-ancestors directive” See here: CSP: frame-ancestors - HTTP | MDN
Thanks I hope to hear from you soon