forked from colin/resume
last ones I think.
This commit is contained in:
parent
6a86b44aab
commit
f8e7e58d26
|
@ -15,11 +15,11 @@ server {
|
|||
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
||||
add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), accelerometer=(), gyroscope=(), magnetometer=(), payment=(), usb=()" always;
|
||||
|
||||
# Updated Content Security Policy (CSP) with specified external domains
|
||||
# Updated Content Security Policy (CSP) with 'unsafe-inline' temporarily for style-src
|
||||
add_header Content-Security-Policy "
|
||||
default-src 'none';
|
||||
script-src 'self' 'nonce-$nonce' https://matomo.nixc.us https://gist.github.com https://assets-cdn.github.com;
|
||||
style-src 'self' 'nonce-$nonce' https://colinknapp.com https://getbootstrap.com https://fonts.googleapis.com;
|
||||
style-src 'self' 'nonce-$nonce' https://colinknapp.com https://getbootstrap.com https://fonts.googleapis.com 'unsafe-inline';
|
||||
img-src 'self' https://matomo.nixc.us https://colinknapp.com https://hedgedoc.nixc.us https://assets-cdn.github.com https://github.com https://forkaweso.me https://ionicons.com https://twitter.com data:;
|
||||
font-src 'self' https://fonts.gstatic.com https://github.com https://forkaweso.me data:;
|
||||
connect-src 'self' https://matomo.nixc.us;
|
||||
|
|
Loading…
Reference in New Issue