msfjarvis/server-config
1
Fork 0
mirror of https://github.com/msfjarvis/server-config synced 2025-08-14 14:07:02 +05:30
Code Issues Projects Releases Packages Wiki Activity Actions

Revert "Caddyfile: update CSP"

Browse source 
This reverts commit 943b398f14.
This commit is contained in:
Harsh Shandilya 2020-05-09 00:42:12 +05:30
parent bacb70c38f
commit 9b7643602d
No known key found for this signature in database
GPG key ID: 366D7BBAD1031E80
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
Caddyfile
View file

@ -11,15 +11,15 @@
header / {
Content-Security-Policy "
base-uri 'none';
connect-src 'self' 'commento.msfjarvis.dev';
connect-src 'self' commento.msfjarvis.dev;
default-src 'none';
frame-ancestors 'none';
form-action 'self';
font-src 'self' data: 'fonts.gstatic.com' 'commento.msfjarvis.dev';
img-src data: 'self' 'gfycat.com' 'imgur.com' '*.imgur.com' 'commento.msfjarvis.dev';
font-src 'self' data: fonts.gstatic.com commento.msfjarvis.dev;
img-src data: 'self' gfycat.com imgur.com *.imgur.com commento.msfjarvis.dev;
object-src 'none';
script-src 'self' 'commento.msfjarvis.dev' 'nonce-a14078dd77014eac4958fccb6008dd4f987ce29d12a215aabeef383c58429916';
style-src 'self' 'fonts.googleapis.com' 'commento.msfjarvis.dev';
script-src 'self' commento.msfjarvis.dev;
style-src 'self' fonts.googleapis.com commento.msfjarvis.dev;
"
# Security related changes stolen from https://github.com/searx/searx-docker/blob/master/Caddyfile
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"