msfjarvis/server-config
1
Fork 0
mirror of https://github.com/msfjarvis/server-config synced 2025-08-14 12:57:00 +05:30
Code Issues Projects Releases Packages Wiki Activity Actions

Caddyfile: update CSP

Browse source 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
This commit is contained in:
Harsh Shandilya 2020-06-02 02:24:18 +05:30
parent 2507b9d34f
commit f74945ae14
No known key found for this signature in database
GPG key ID: 366D7BBAD1031E80
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
Caddyfile
View file

@ -15,10 +15,10 @@
default-src 'self';
frame-ancestors 'none';
font-src 'self' data: commento.msfjarvis.dev stackpath.bootstrapcdn.com;
img-src 'self' data: gfycat.com imgur.com *.imgur.com commento.msfjarvis.dev;
img-src 'self' data: gfycat.com imgur.com *.imgur.com commento.msfjarvis.dev *.amazonaws.com;
object-src 'none';
script-src 'self' commento.msfjarvis.dev 'sha256-o7J3VkM1HdcyiYXa81laTjuC7e15LtXtTRm8x3cx2cw' 'nonce-Y2xvYWtlbWFpbAo=';
style-src 'self' commento.msfjarvis.dev stackpath.bootstrapcdn.com 'sha256-PjBkwE8xcYZAp+HsnzzOVNqa/Ra+/v1Fnx6f0PW6ic4=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'nonce-Y2xvYWtlbWFpbAo=';
script-src 'self' commento.msfjarvis.dev 'sha256-o7J3VkM1HdcyiYXa81laTjuC7e15LtXtTRm8x3cx2cw' 'nonce-Y2xvYWtlbWFpbAo=' 'unsafe-inline';
style-src 'self' commento.msfjarvis.dev stackpath.bootstrapcdn.com 'sha256-PjBkwE8xcYZAp+HsnzzOVNqa/Ra+/v1Fnx6f0PW6ic4=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'nonce-Y2xvYWtlbWFpbAo=' 'unsafe-inline';
"
# Security related changes stolen from https://github.com/searx/searx-docker/blob/master/Caddyfile
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"