added auth0 in the frame src

Author: kartikpersistent

frontend/nginx/nginx.prod.conf

@@ -3,7 +3,7 @@ server {
   add_header X-Frame-Options "DENY";
   add_header X-Content-Type-Options "nosniff";
   add_header Content-Security-Policy   "connect-src 'self' ${VITE_BACKEND_API_URL} ${VITE_SEGMENT_API_URL};
-                                        frame-src 'self' *.youtube.com *.wikipedia.org;
+                                        frame-src 'self' *.youtube.com *.wikipedia.org ${AUT0_DOMAIN};
                                         script-src 'self' 'unsafe-inline' https://accounts.google.com/gsi/client;
                                         default-src 'self' *.${VITE_FRONTEND_HOSTNAME} data:;
                                         style-src 'self' *.googleapis.com 'unsafe-inline';" always ;