Added Content-Security-Policy headers securization

This commit is contained in:
Rooty 2021-04-11 02:23:25 +02:00
parent e4b2bedda5
commit d19fac15fe

View File

@ -33,6 +33,9 @@ Options -Indexes
Header onsuccess unset Permissions-Policy
Header always set Permissions-Policy "geolocation=(self);midi=(self);microphone=(self);camera=(self);fullscreen=(self);payment=()"
Header onsuccess unset Content-Security-Policy
Header always set Content-Security-Policy: default-src 'none'; script-src 'self'
SetEnv modHeadersAvailable true
</IfModule>