baalajimaestro/personal-website
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Use CSP instead of X-Frame-Options

Browse source 
Signed-off-by: baalajimaestro <me@baalajimaestro.me>
This commit is contained in:
baalajimaestro 2022-11-15 19:30:51 +05:30
parent 58e04c7cae
commit f11a9de768
Signed by: baalajimaestro
GPG key ID: F93C394FE9BBAFD5
1 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
static/_headers
View file

@ -1,5 +1,4 @@
/*
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: upgrade-insecure-requests
Content-Security-Policy: upgrade-insecure-requests; frame-ancestors 'self' https://*.baalajimaestro.me;