Add to CSP
report-uri /csp-report; report-to csp-endpoint;">
This commit is contained in:
15
index.html
15
index.html
@@ -9,10 +9,17 @@
|
||||
style-src 'self';
|
||||
font-src 'self' ;
|
||||
connect-src 'self' https: ;
|
||||
img-src 'self' data:;
|
||||
media-src 'none';
|
||||
object-src 'none';
|
||||
frame-src 'none';">
|
||||
img-src 'self' data:;
|
||||
font-src 'self';
|
||||
manifest-src 'self';
|
||||
worker-src 'self';
|
||||
object-src 'none';
|
||||
frame-ancestors 'none';
|
||||
form-action 'self';
|
||||
upgrade-insecure-requests;
|
||||
block-all-mixed-content;
|
||||
report-uri /csp-report;
|
||||
report-to csp-endpoint;">
|
||||
<meta http-equiv="X-Content-Type-Options" content="nosniff">
|
||||
<meta http-equiv="X-XSS-Protection" content="1; mode=block">
|
||||
<meta http-equiv="Referrer-Policy" content="strict-origin-when-cross-origin">
|
||||
|
||||
Reference in New Issue
Block a user