sloane
/
mat.services
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Rewrite CSP
continuous-integration/drone/push Build is passing Details
continuous-integration/drone Build is passing Details

pull/1/head
mat ess 2022-10-23 11:43:29 -04:00
parent 077941d484
commit fb0ede22eb
2 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
flake.nix
View File

@ -38,7 +38,7 @@
{ {
packages.default = with pkgs; stdenv.mkDerivation { packages.default = with pkgs; stdenv.mkDerivation {
pname = "personal-site"; pname = "personal-site";
version = "2022-10-20"; version = "2022-10-23";
src = gitignoreSource ./.; src = gitignoreSource ./.;
nativeBuildInputs = [ optimize-images zola ]; nativeBuildInputs = [ optimize-images zola ];
configurePhase = copyFonts + '' configurePhase = copyFonts + ''

12
netlify.toml
View File

@ -22,7 +22,7 @@
Permissions-Policy = "interest-cohort=()" Permissions-Policy = "interest-cohort=()"
# enable HSTS # enable HSTS
Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload" Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
# disable clients from sniffing the media type # prevent clients from sniffing the media type
X-Content-Type-Options = "nosniff" X-Content-Type-Options = "nosniff"
# clickjacking protection # clickjacking protection
X-Frame-Options = "DENY" X-Frame-Options = "DENY"
@ -30,13 +30,13 @@
Referrer-Policy = "no-referrer" Referrer-Policy = "no-referrer"
# content security policy # content security policy
# style-src 'unsafe-inline': syntax highlighting in codefences # style-src 'unsafe-inline': syntax highlighting in codefences
# sandbox allow-popups: enable target="_blank" links to open in new tabs # sandbox allow-popups*: enable target="_blank" links to open in new tabs
Content-Security-Policy = ''' Content-Security-Policy = '''
default-src 'none'; default-src 'none';
img-src 'self' https://mat.services https://stats.mat.services; img-src 'self' https://stats.mat.services;
style-src 'self' https://mat.services 'unsafe-inline'; style-src 'self' 'unsafe-inline';
font-src 'self' https://mat.services; font-src 'self';
script-src 'self' https://mat.services https://stats.mat.services; script-src 'sha256-a8rh6u3maZ6JiY6w6zsLlw9OUQf2tFPUX3t1/BV+RKc=' 'strict-dynamic';
form-action 'none'; form-action 'none';
frame-ancestors 'none'; frame-ancestors 'none';
base-uri 'none'; base-uri 'none';