From 7f0f6a40531c75f09e4b25d2eebc00c921ad439b Mon Sep 17 00:00:00 2001
From: Jieiku
Date: Tue, 31 May 2022 02:20:08 -0700
Subject: Update: CSP, 404, About

---
 config.toml            | 4 ++--
 content/pages/about.md | 2 +-
 templates/404.html     | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/config.toml b/config.toml
index 4eb08cf..287a006 100644
--- a/config.toml
+++ b/config.toml
@@ -73,14 +73,14 @@ menu_footer = [
     {url = "/sitemap.xml", name = "Sitemap", slash = false},
 ]
 
-# Security Headers should preferably be set by your webserver (Nginx, Apache) https://observatory.mozilla.org
+# Security Headers should preferably be set by your webserver (Nginx, Apache) https://observatory.mozilla.org  https://csp-evaluator.withgoogle.com/
 # If you are unable to load your security headers with your webserver, this will load a couple of them as meta tags.
 # There are many other security related headers most of which can only be set by the webserver method.
 # Comment out either of these meta headers and they wont be used.
 
 security_header_referrer = "strict-origin-when-cross-origin"
 
-#security_header_csp = "default-src 'none'; frame-ancestors 'none'; base-uri 'self'; manifest-src 'self'; connect-src 'self'; form-action 'self'; font-src 'self' cdn.jsdelivr.net fonts.gstatic.com; style-src 'self' cdn.jsdelivr.net fonts.googleapis.com; object-src 'self'; frame-src 'self' *.youtube.com; img-src 'self' data: cdn.cloudflare.com; script-src 'self' 'unsafe-inline' *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com"
+#security_header_csp = "default-src 'none'; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; manifest-src 'self'; connect-src 'self'; form-action 'self'; frame-src 'self' *.youtube.com; font-src 'self' cdn.cloudflare.com cdn.jsdelivr.net fonts.gstatic.com; img-src 'self' data: cdn.cloudflare.com; style-src 'self' 'unsafe-inline' cdn.cloudflare.com cdn.jsdelivr.net fonts.googleapis.com; script-src 'self' 'unsafe-inline' cdnjs.cloudflare.com *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com"
 
 
 #################
diff --git a/content/pages/about.md b/content/pages/about.md
index 6632426..2c083e1 100644
--- a/content/pages/about.md
+++ b/content/pages/about.md
@@ -6,7 +6,7 @@ template = "pages.html"
 
 This site provides a demo for the [abridge theme](https://github.com/Jieiku/abridge) for [Zola](https://www.getzola.org/) the static site generator.
 
-Abridge was created by [Jake G (jieiku)](https://github.com/Jieiku) to be fast and lightweight, using semantic html, [abridge.css](https://github.com/Jieiku/abridge.css) class-light CSS, and No JS.
+Abridge was created by [Jake G (jieiku)](https://github.com/Jieiku) to be fast and lightweight, using semantic html, a class-light [abridge.css](https://github.com/Jieiku/abridge.css), and No JS.
 
 Some fun facts about the theme:
 
diff --git a/templates/404.html b/templates/404.html
index 401d657..f2de753 100644
--- a/templates/404.html
+++ b/templates/404.html
@@ -19,6 +19,6 @@
     <div>
       <h1>Page not found :(</h1>
       <p>The page you are looking for doesn't exist or has been moved.</p>
-      <p>Try using the search, or <a href="{{ get_url(path="/", trailing_slash=true) }}">go home</a>.</p>
+      <p>Try using the search, or <a href="{{ config.base_url | safe }}">go home</a>.</p>
     </div>
 {%- endblock content %}
-- 
cgit v1.3.1