var c=async({url:n,requestDomain:a})=>{let r=await fetch(n),e=r.headers.get("content-security-policy");if(console.log("cspHeader",e),e){let s=e.match(/frame-ancestors\s+([\s\S]+?)(?=;|$)/i);if(s&&(s[1]==="*"||s[1].split(/\s+/).includes(a)))return!0}let t=r.headers.get("X-Frame-Options");return t==="DENY"||t==="SAMEORIGIN",!1};export{c as a};
