Rearrange CSP policies
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
178b5ef936
commit
237f6eafc0
|
@ -1,6 +1,6 @@
|
|||
/*
|
||||
Strict-Transport-Security : max-age=63072000; includeSubDomains; preload
|
||||
Content-Security-Policy : default-src 'none'; connect-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'; form-action 'none'; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; base-uri 'none'
|
||||
Content-Security-Policy : default-src 'none'; connect-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'; base-uri 'none'; block-all-mixed-content; form-action 'none'; frame-ancestors 'none'; upgrade-insecure-requests
|
||||
X-Content-Type-Options : nosniff
|
||||
Referrer-Policy : no-referrer
|
||||
X-Frame-Options : DENY
|
||||
|
|
Loading…
Reference in New Issue