adyxax/www
1
0
Fork 0
Code Issues Activity

Fixed CSP

Browse source
This commit is contained in:
Julien Dessaux 2023-10-01 22:43:00 +02:00
parent eae2953e7c
commit 8d25e818d6
Signed by: adyxax
GPG key ID: F92E51B86E07177E
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
deploy/headers_secure.conf
View file

@ -4,7 +4,7 @@ add_header X-XSS-Protection "1; mode=block";
add_header X-Content-Type-Options nosniff;
add_header Referrer-Policy strict-origin;
add_header Cache-Control no-transform;
add_header Content-Security-Policy "script-src 'self'";
add_header Content-Security-Policy "script-src 'unsafe-inline'";
add_header Permissions-Policy "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()";
# 6 months HSTS pinning
add_header Strict-Transport-Security max-age=16000000;