From 198dfc0fc818443ab80620297c0b9c4c61d38ff0 Mon Sep 17 00:00:00 2001
From: xtzws <isaac@10161997.xyz>
Date: Fri, 14 Mar 2025 03:39:44 -0400
Subject: [PATCH] Update _headers to try and get the MDN CSP test to pass

---
 _headers | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/_headers b/_headers
index 3cd967e..e0d36e9 100644
--- a/_headers
+++ b/_headers
@@ -1,5 +1,5 @@
 /*
-  Content-Security-Policy: upgrade-insecure-requests, base-uri 'none'; default-src 'none'; font-src 'self'; style-src 'self'; script-src 'none'; object-src 'none'; form-action 'none'; frame-ancestors 'none'
+  Content-Security-Policy: upgrade-insecure-requests; base-uri 'none'; default-src 'none'; font-src 'self'; form-action 'none'; img-src 'none'; object-src 'none'; script-src 'none'; style-src 'self'; frame-ancestors 'none';
   X-Frame-Options: DENY
   Referrer-Policy: no-referrer
   X-Content-Type-Options: nosniff
@@ -7,3 +7,4 @@
   Strict-Transport-Security: max-age=31536000; includeSubDomains
   Actual-Server: Tag 2 electric boogaloo
   Joe-Biden: Eat some chocolate chocolate chip!
+  My-Personal-Phone-Number: 3. What's that? You wanted the whole thing? Oh! It's 12.