updated headers
All checks were successful
Build and Deploy Website / Build Website (push) Successful in 1m49s
Build and Deploy Website / Deploy Website (push) Has been skipped
Build and Deploy Website / Deploy Dev Website (push) Successful in 16s

This commit is contained in:
Samuel Philipp 2023-12-07 02:22:51 +01:00
parent 95fdada921
commit 2a40582394

View file

@ -9,7 +9,7 @@ Website for [sp-codes.de](https://sp-codes.de)
The following Parameters are set directly on the Web-Server.
```
Content-Security-Policy: default-src 'none'; script-src 'self' https://umami.sp-codes.de; object-src 'none'; style-src 'self'; img-src 'self' https://shields.sp-codes.de; media-src 'none'; frame-src 'none'; font-src 'self'; connect-src 'self' https://umami.sp-codes.de
Content-Security-Policy: default-src 'none'; script-src 'self' https://umami.sp-codes.de; object-src 'none'; style-src 'self'; img-src 'self' https://status.sp-codes.de https://shields.sp-codes.de; media-src 'none'; frame-src 'none'; font-src 'self'; connect-src 'self' https://umami.sp-codes.de
Referrer-Policy: strict-origin-when-cross-origin
Feature-Policy: sync-xhr 'self'
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload