sloane
/
mat.services
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix prod headers syntax, really
continuous-integration/drone/push Build is passing Details
continuous-integration/drone Build is passing Details

pull/1/head
mat ess 2022-10-20 21:05:24 -04:00
parent ab7b882bc3
commit 05f894ede0
1 changed files with 24 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

47
headers/production
View File

@ -1,23 +1,24 @@
# disable FLoC tracking /*
Permissions-Policy: interest-cohort=() # disable FLoC tracking
# enable HSTS Permissions-Policy: interest-cohort=()
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload # enable HSTS
# disable clients from sniffing the media type Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff # disable clients from sniffing the media type
# clickjacking protection X-Content-Type-Options: nosniff
X-Frame-Options: DENY # clickjacking protection
# keep referrer data off of HTTP connections X-Frame-Options: DENY
Referrer-Policy: no-referrer # keep referrer data off of HTTP connections
# content security policy Referrer-Policy: no-referrer
# style-src 'unsafe-inline': syntax highlighting in codefences # content security policy
# sandbox allow-popups: enable target="_blank" links to open in new tabs # style-src 'unsafe-inline': syntax highlighting in codefences
Content-Security-Policy: default-src 'none'; # sandbox allow-popups: enable target="_blank" links to open in new tabs
Content-Security-Policy: img-src 'self' https://mat.services https://stats.mat.services; Content-Security-Policy: default-src 'none';
Content-Security-Policy: style-src 'self' https://mat.services 'unsafe-inline'; Content-Security-Policy: img-src 'self' https://mat.services https://stats.mat.services;
Content-Security-Policy: font-src 'self' https://mat.services; Content-Security-Policy: style-src 'self' https://mat.services 'unsafe-inline';
Content-Security-Policy: script-src 'self' https://mat.services https://stats.mat.services; Content-Security-Policy: font-src 'self' https://mat.services;
Content-Security-Policy: form-action 'none'; Content-Security-Policy: script-src 'self' https://mat.services https://stats.mat.services;
Content-Security-Policy: frame-ancestors 'none'; Content-Security-Policy: form-action 'none';
Content-Security-Policy: base-uri 'none'; Content-Security-Policy: frame-ancestors 'none';
Content-Security-Policy: upgrade-insecure-requests; Content-Security-Policy: base-uri 'none';
Content-Security-Policy: sandbox allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox; Content-Security-Policy: upgrade-insecure-requests;
Content-Security-Policy: sandbox allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox;