ik/rf4-spotter
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: restrict production content origins
CI / backend-and-migrations (push) Canceled after 0s
Details
CI / astro-build (push) Canceled after 0s
Details
CI / dependency-audit (push) Canceled after 0s
Details
CI / compose-e2e (push) Canceled after 0s
Details

Browse Source
This commit is contained in:
ik
2026-09-13 09:33:39 +07:00
parent aae5e0926a
commit c93c6adc7a
4 changed files with 25 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/Caddyfile
+1 -1
View File
@@ -52,7 +52,7 @@
Permissions-Policy "camera=(), microphone=(), geolocation=()"
X-Frame-Options "DENY"
Cross-Origin-Opener-Policy "same-origin"
Content-Security-Policy "frame-ancestors 'none'; base-uri 'self'; object-src 'none'"
Content-Security-Policy "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; connect-src 'self'; img-src 'self' data: https://{$FILES_DOMAIN}; font-src 'self'; media-src 'self'; manifest-src 'self'; script-src 'self' 'unsafe-inline'; script-src-attr 'none'; style-src 'self' 'unsafe-inline'; style-src-attr 'unsafe-inline'; upgrade-insecure-requests"
}
}