frame-src overrides child-src if present. (#224)

tolmasky · web-flow · commit c8d41c62b446 · 2020-04-25T00:49:02.000-07:00
Reviewed by @tolmasky.
diff --git a/_headers b/_headers
@@ -46,6 +46,8 @@ csp:
     'ms-appx-web:',
     'ghbtns.com',
     'runkit.com',
+    '*.runkit-embed.com',
+    'runkit-embed.com',
     'platform.twitter.com'
   ]
   manifest-src: [
