Text prod headers fix 2 electric boogaloo
continuous-integration/drone/push Build is passing Details
continuous-integration/drone Build is passing Details

pull/1/head
mat ess 2022-10-20 21:14:01 -04:00
parent d32ef2db66
commit 0f53356f4c
1 changed files with 10 additions and 1 deletions

View File

@ -12,4 +12,13 @@
# content security policy
# style-src 'unsafe-inline': syntax highlighting in codefences
# sandbox allow-popups: enable target="_blank" links to open in new tabs
Content-Security-Policy: default-src 'none';
Content-Security-Policy: default-src 'none'
Content-Security-Policy: img-src 'self' https://mat.services https://stats.mat.services
Content-Security-Policy: style-src 'self' https://mat.services 'unsafe-inline'
Content-Security-Policy: font-src 'self' https://mat.services
Content-Security-Policy: script-src 'self' https://mat.services https://stats.mat.services
Content-Security-Policy: form-action 'none'
Content-Security-Policy: frame-ancestors 'none'
Content-Security-Policy: base-uri 'none'
Content-Security-Policy: upgrade-insecure-requests
Content-Security-Policy: sandbox allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox