msfjarvis
/
msfjarvis.dev
mirror of https://github.com/msfjarvis/msfjarvis.dev.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Caddyfile: update CSP 

Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
This commit is contained in:
Harsh Shandilya 2020-07-15 15:01:05 +05:30
parent 284e447d24
commit fe7a4d7c41
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
Caddyfile
View File

@ -9,12 +9,12 @@
connect-src 'self' commento.msfjarvis.dev;
default-src 'self';
frame-ancestors 'none';
frame-src github.com;
frame-src 'none';
font-src 'self' data: commento.msfjarvis.dev stackpath.bootstrapcdn.com;
img-src 'self' data: gfycat.com imgur.com *.imgur.com commento.msfjarvis.dev *.amazonaws.com;
img-src 'self' data: gfycat.com imgur.com *.imgur.com commento.msfjarvis.dev;
object-src 'none';
script-src 'self' commento.msfjarvis.dev 'unsafe-inline';
style-src 'self' commento.msfjarvis.dev stackpath.bootstrapcdn.com 'unsafe-inline';
script-src 'self' commento.msfjarvis.dev unpkg.com;
style-src 'self' commento.msfjarvis.dev stackpath.bootstrapcdn.com;
"
# Security related changes stolen from https://github.com/searx/searx-docker/blob/master/Caddyfile
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"