From 1213446747988939d2b40e5a3eaed9d0fc03fec2 Mon Sep 17 00:00:00 2001
From: Michael SCHAL <michaelschal@gmail.com>
Date: Sun, 7 Dec 2025 10:45:38 +0100
Subject: [PATCH] feat: add security middleware for headers, honeypot, and rate
 limiting.

---
 bin/middleware/security_middleware.dart | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/middleware/security_middleware.dart b/bin/middleware/security_middleware.dart
index c66a5de..1558941 100644
--- a/bin/middleware/security_middleware.dart
+++ b/bin/middleware/security_middleware.dart
@@ -17,7 +17,7 @@ Middleware securityHeadersMiddleware() {
       
       return response.change(headers: {
         'X-Content-Type-Options': 'nosniff',
-        'X-Frame-Options': 'DENY',
+        'X-Frame-Options': 'SAMEORIGIN', // Changed from DENY to allow embedding player.html
         'X-XSS-Protection': '1; mode=block',
         'Strict-Transport-Security': 'max-age=63072000; includeSubDomains; preload',
         'Referrer-Policy': 'strict-origin-when-cross-origin',