removed .htaccess updated README.md

README.md

@@ -5,4 +5,18 @@
 Website for samuel-philipp.de
 
 [GitHub](https://github.com/samuel-p/samuel-philipp.de)
-[GitLab](https://gitlab.com/samuel-p/samuel-philipp.de)
+[GitLab](https://gitlab.com/samuel-p/samuel-philipp.de)
+
+## Additional Header Parameters
+
+The following Parameters are set directly on the Web-Server.
+
+```
+Content-Security-Policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; font-src 'self'
+Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
+X-Content-Type-Options: nosniff
+X-Frame-Options: DENY
+X-XSS-Protection: 1; mode=block
+```
+
+There is also a `301` Redirect from http to https.

src/.htaccess

@@ -1,6 +0,0 @@
-RewriteEngine On
-
-Header always set "Content-Security-Policy" "default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'"
-
-RewriteCond %{HTTPS} off
-RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]