personal-website/static/_headers
baalajimaestro f11a9de768
Use CSP instead of X-Frame-Options
Signed-off-by: baalajimaestro <me@baalajimaestro.me>
2022-11-15 19:30:51 +05:30

5 lines
194 B
Plaintext

/*
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: upgrade-insecure-requests; frame-ancestors 'self' https://*.baalajimaestro.me;