ElyBy-Mirror/accounts
1
0
Fork 0
mirror of https://github.com/elyby/accounts.git synced 2024-11-08 13:42:30 +05:30
Code Issues Packages Projects Releases Wiki Activity

Add CSP header

Browse Source
This commit is contained in:
ErickSkrauch 2019-11-26 22:47:22 +03:00
parent 9eea03df73
commit 9f645d0934
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
docker/nginx/account.ely.by.conf.template
View File

@ -10,6 +10,7 @@ server {
add_header X-Frame-Options "sameorigin" always; add_header X-Frame-Options "sameorigin" always;
add_header X-XSS-Protection "1; mode=block" always; add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always; add_header X-Content-Type-Options "nosniff" always;
add_header Content-Security-Policy "default-src 'none';style-src 'self' 'unsafe-inline';script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/;img-src 'self' data: www.google-analytics.com;font-src 'self' data:;connect-src 'self' https://sentry.io https://sentry.ely.by;frame-src https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/";
# You can uncomment the next lines to enable debug mode # You can uncomment the next lines to enable debug mode
# rewrite_log on; # rewrite_log on;