toufy/adonis
toufy/adonis
1
Fork 0
Code Activity Actions

remove upgrade-insecure-requests csp
All checks were successful
/ deploy (push) Successful in 32s
Details

Browse source
This commit is contained in:
toufic ar 2026-03-04 04:03:03 +02:00
parent b9b3a64a8e
commit d5fc3b8852
Signed by: toufic ar
SSH key fingerprint: SHA256:/NaO5I1nG3gYKzrzSiTYIdRyaIYxDWfr1U+d+yfJ/4k
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
config/http/default.nix
View file

@ -35,7 +35,7 @@ in {
https "max-age=31536000; includeSubdomains; preload";
}
more_set_headers 'Strict-Transport-Security: $hsts_header';
more_set_headers 'Content-Security-Policy: upgrade-insecure-requests; default-src "self"';
more_set_headers 'Content-Security-Policy: default-src "self"';
more_set_headers 'Referrer-Policy: origin-when-cross-origin';
more_set_headers 'X-Frame-Options: DENY';
more_set_headers 'X-Content-Type-Options: nosniff';