Update _headers with CSP

This commit is contained in:
xtzws 2025-03-14 03:32:16 -04:00 committed by GitHub
parent eca47be0c5
commit fc3a679b62
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -1,8 +1,9 @@
/*
Content-Security-Policy: upgrade-insecure-requests, default-src 'none'; font-src 'self'; style-src 'self'; script-src 'none'; object-src 'none'
Content-Security-Policy: upgrade-insecure-requests, base-uri 'none'; default-src 'none'; font-src 'self'; style-src 'self'; script-src 'none'; object-src 'none'; form-action 'none'; frame-ancestors 'none'
X-Frame-Options: DENY
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: same-origin
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server: Tag 2 electric boogaloo
Actual-Server: Tag 2 electric boogaloo
Joe-Biden: Eat some chocolate chocolate chip!