msfjarvis/server-config
1
Fork 0
mirror of https://github.com/msfjarvis/server-config synced 2025-08-14 11:47:01 +05:30
Code Issues Projects Releases Packages Wiki Activity Actions

Caddyfile: update CSP

Browse source 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
This commit is contained in:
Harsh Shandilya 2020-05-07 16:27:07 +05:30
parent 5783f029e0
commit 943b398f14
No known key found for this signature in database
GPG key ID: 366D7BBAD1031E80
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
Caddyfile
View file

@ -11,15 +11,15 @@
header / {
Content-Security-Policy "
base-uri 'none';
connect-src 'self' commento.msfjarvis.dev;
connect-src 'self' 'commento.msfjarvis.dev';
default-src 'none';
frame-ancestors 'none';
form-action 'self';
font-src 'self' data: fonts.gstatic.com commento.msfjarvis.dev;
img-src data: 'self' gfycat.com imgur.com *.imgur.com commento.msfjarvis.dev;
font-src 'self' data: 'fonts.gstatic.com' 'commento.msfjarvis.dev';
img-src data: 'self' 'gfycat.com' 'imgur.com' '*.imgur.com' 'commento.msfjarvis.dev';
object-src 'none';
script-src 'self' commento.msfjarvis.dev;
style-src 'self' fonts.googleapis.com commento.msfjarvis.dev;
script-src 'self' 'commento.msfjarvis.dev' 'nonce-a14078dd77014eac4958fccb6008dd4f987ce29d12a215aabeef383c58429916';
style-src 'self' 'fonts.googleapis.com' 'commento.msfjarvis.dev';
"
# Security related changes stolen from https://github.com/searx/searx-docker/blob/master/Caddyfile
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"