toufy/adonis
toufy/adonis
1
Fork 0
Code Activity Actions

remove default-src directive
All checks were successful
/ deploy (push) Successful in 30s
Details

Browse source
This commit is contained in:
toufic ar 2026-01-15 02:29:41 +02:00
parent e230ba3da0
commit 4010d4932b
Signed by: toufic ar
SSH key fingerprint: SHA256:/NaO5I1nG3gYKzrzSiTYIdRyaIYxDWfr1U+d+yfJ/4k
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
config/http/default.nix
View file

@ -16,7 +16,7 @@ in {
recommendedBrotliSettings = true; recommendedBrotliSettings = true;
appendHttpConfig = '' appendHttpConfig = ''
add_header Content-Security-Policy "default-src 'self'; object-src 'none'; base-uri 'none';" always; add_header Content-Security-Policy "object-src 'none'; base-uri 'none';" always;
add_header 'Referrer-Policy' 'origin-when-cross-origin'; add_header 'Referrer-Policy' 'origin-when-cross-origin';
add_header X-Frame-Options DENY; add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff; add_header X-Content-Type-Options nosniff;