Added CSP

moso · May 10, 2024 · 9edd410 · 9edd410
1 parent 46650ac
commit 9edd410
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/_headers b/_headers
@@ -1,11 +1,11 @@
 /*
-  Referrer-Policy: no-referrer-when-downgrade
+  Referrer-Policy: no-referrer
   Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
   X-Content-Type-Options: nosniff
   X-Download-Opotions: noopen
-  X-Frame-Options: SAMEORIGIN
   X-Permitted-Cross-Domain-Policies: none
-  X-XSS-Protection: 1; mode=block
+  X-XSS-Protection: 0
+  Content-Security-Policy: default-src 'self'; style-src 'self' https://fonts.bunny.net 'unsafe-inline'; font-src 'self' https://fonts.bunny.net; img-src 'self' data:; frame-ancestors 'self'; object-src 'none'; require-trusted-types-for 'script'; base-uri 'self'; form-action 'none'
 
 /images/*
   Cache-Control: public, max-age=31536000, immutable