@@ -36,21 +36,21 @@ Released on May 15, 2025
3636
3737#### iFrame integration support and auto open upload popup
3838
39- One of our user noticed that version 6 was not working within iFrames. This is because we have secure headers
39+ One of our users noticed that version 6 was not working within iFrames. This is because we have secure headers
4040to avoid clickjacking. We added one ` .env ` variable ` SECURITY_HEADER_CSP_FRAME_ANCESTORS ` (empty by default)
4141which allows to add the domains that are allowed to load Lychee in an iFrame. Note that this kind of integration
42- of Lychee is is not recommended as the cookies will also be set with the policy ` SameSite=None ` .
42+ of Lychee is not recommended as the cookies will also be set with the policy ` SameSite=None ` .
4343If you wish to use iFrames, to make sure that the configuration remains secure,
4444you will also have to set the ` SESSION_SECURE_COOKIE ` to ` true ` in your ` .env ` file.
4545
4646The second change is a small one, but it is a nice addition: by adding ` #upload ` to a Lychee album url,
4747the upload popup will be automatically opened. This is aimed as users who which to give an upload link to their friends.
4848Note that this will require you to have guest upload enabled in the album settings.
4949
50- * ` new ` #3343 : Add insecure options (with secure defaults) to use Lyche in iFrames by @ildyria .
50+ * ` new ` #3343 : Add insecure options (with secure defaults) to use Lychee in iFrames by @ildyria .
5151 > This setting needs to be enabled via ` .env ` configuration and is disabled by default.
5252* ` new ` #3340 : Add ` #upload ` to trigger upload modal from url in an album by @ildyria .
53- > For this to works , guest upload must be enabled in the album settings.
53+ > For this to work , guest upload must be enabled in the album settings.
5454
5555
5656### v6.6.1
0 commit comments