diff options
| author | Jieiku | 2022-05-31 12:44:27 -0700 |
|---|---|---|
| committer | Jieiku | 2022-05-31 12:44:27 -0700 |
| commit | b2acfdad5d8fe428b5f12510d64936053c66f774 (patch) | |
| tree | 65d9448eb98aaba5526f4e9fb28752817b08212a /netlify.toml | |
| parent | 17c9752e13e31987a4cf448eefc6eddce4cc074b (diff) | |
| download | abridge-b2acfdad5d8fe428b5f12510d64936053c66f774.tar.gz abridge-b2acfdad5d8fe428b5f12510d64936053c66f774.tar.bz2 abridge-b2acfdad5d8fe428b5f12510d64936053c66f774.zip | |
Update CSP
Diffstat (limited to 'netlify.toml')
| -rw-r--r-- | netlify.toml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/netlify.toml b/netlify.toml index b8e4530..1a0c0e0 100644 --- a/netlify.toml +++ b/netlify.toml @@ -16,4 +16,4 @@ command = "zola build --base-url $DEPLOY_PRIME_URL" X-XSS-Protection = "1; mode=block" Referrer-Policy = "strict-origin-when-cross-origin" Strict-Transport-Security = "max-age=63072000; includeSubdomains" - Content-Security-Policy = "require-trusted-types-for 'script'; default-src 'none'; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; manifest-src 'self'; connect-src 'self'; form-action 'self'; media-src 'self' data: cdn.cloudflare.com www.youtube-nocookie.com player.vimeo.com; frame-src 'self' www.youtube-nocookie.com player.vimeo.com; font-src 'self' cdn.cloudflare.com cdn.jsdelivr.net fonts.gstatic.com; img-src 'self' data: cdn.cloudflare.com; style-src 'self' 'unsafe-inline' cdn.cloudflare.com cdn.jsdelivr.net fonts.googleapis.com; script-src 'self' www.youtube-nocookie.com player.vimeo.com" + Content-Security-Policy = "default-src 'none'; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; manifest-src 'self'; connect-src 'self'; form-action 'self'; media-src 'self' data: cdn.cloudflare.com www.youtube-nocookie.com player.vimeo.com; frame-src 'self' www.youtube-nocookie.com player.vimeo.com; font-src 'self' cdn.cloudflare.com cdn.jsdelivr.net fonts.gstatic.com; img-src 'self' data: cdn.cloudflare.com; style-src 'self' 'unsafe-inline' cdn.cloudflare.com cdn.jsdelivr.net fonts.googleapis.com; script-src 'self' www.youtube-nocookie.com player.vimeo.com" |