mirror of
https://github.com/msfjarvis/server-config
synced 2025-08-14 10:37:02 +05:30
Caddyfile: set CSP for staging environment
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
This commit is contained in:
parent
1a8ae6a10c
commit
7fa7b84d92
1 changed files with 13 additions and 0 deletions
13
Caddyfile
13
Caddyfile
|
@ -98,4 +98,17 @@ https://staging.msfjarvis.dev {
|
|||
errors {
|
||||
404 404.html
|
||||
}
|
||||
header / {
|
||||
Content-Security-Policy "
|
||||
base-uri 'self';
|
||||
connect-src 'self' commento.msfjarvis.dev;
|
||||
default-src 'self';
|
||||
frame-ancestors 'none';
|
||||
font-src 'self' data: commento.msfjarvis.dev stackpath.bootstrapcdn.com;
|
||||
img-src 'self' data: gfycat.com imgur.com *.imgur.com commento.msfjarvis.dev *.amazonaws.com;
|
||||
object-src 'none';
|
||||
script-src 'self' commento.msfjarvis.dev unpkg.com;
|
||||
style-src 'self' commento.msfjarvis.dev stackpath.bootstrapcdn.com;
|
||||
"
|
||||
}
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue