msfjarvis/server-config
1
Fork 0
mirror of https://github.com/msfjarvis/server-config synced 2025-08-14 10:37:02 +05:30
Code Issues Projects Releases Packages Wiki Activity Actions

Caddyfile: update CSP

Browse source 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
This commit is contained in:
Harsh Shandilya 2020-06-24 20:41:04 +05:30
parent f8a20d2b55
commit ddb9b57c52
No known key found for this signature in database
GPG key ID: 366D7BBAD1031E80
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
Caddyfile
View file

@ -13,7 +13,7 @@
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
X-XSS-Protection "1; mode=block"
X-Frame-Options "SAMEORIGIN"
Feature-Policy "accelerometer 'none';ambient-light-sensor 'none'; autoplay 'none';camera 'none';encrypted-media 'none'; geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none'; speaker 'none';sync-xhr 'none';usb 'none';vr 'none'"
Feature-Policy "accelerometer 'none'; autoplay 'none';camera 'none';encrypted-media 'none'; geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none';sync-xhr 'none';usb 'none'"
Referrer-Policy "no-referrer"
}
}
@ -47,6 +47,7 @@ https://msfjarvis.dev {
connect-src 'self' commento.msfjarvis.dev;
default-src 'self';
frame-ancestors 'none';
frame-src 'https://github.com';
font-src 'self' data: commento.msfjarvis.dev stackpath.bootstrapcdn.com;
img-src 'self' data: gfycat.com imgur.com *.imgur.com commento.msfjarvis.dev *.amazonaws.com;
object-src 'none';