Added Content-Security-Policy headers securization
This commit is contained in:
parent
e4b2bedda5
commit
d19fac15fe
@ -34,6 +34,9 @@ Options -Indexes
|
||||
Header onsuccess unset Permissions-Policy
|
||||
Header always set Permissions-Policy "geolocation=(self);midi=(self);microphone=(self);camera=(self);fullscreen=(self);payment=()"
|
||||
|
||||
Header onsuccess unset Content-Security-Policy
|
||||
Header always set Content-Security-Policy: default-src 'none'; script-src 'self'
|
||||
|
||||
SetEnv modHeadersAvailable true
|
||||
</IfModule>
|
||||
</IfModule>
|
||||
|
Loading…
x
Reference in New Issue
Block a user