go-gitea/blog
1
0
Fork 0
mirror of https://github.com/go-gitea/blog.git synced 2026-07-01 20:54:04 -04:00
Code Issues Packages Projects Releases Wiki Activity

Added docs.gitea.io and opencollective to CSP (#95)

Browse Source 
Signed-off-by: jolheiser <john.olheiser@gmail.com>
This commit is contained in:
John Olheiser
2019-04-22 16:09:58 -05:00
committed by techknowlogick
parent a7c93ea84b
commit 7acee8fb4c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
static/_headers
+1 -1
View File
@@ -1,5 +1,5 @@
/*
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://discourse.gitea.io https://discourse-cdn-sjc2.com; style-src 'self' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://discourse-cdn-sjc2.com; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com; img-src 'self' https://discourse.gitea.io https://discourse-cdn-sjc2.com; frame-src 'self' https://discourse.gitea.io
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://discourse.gitea.io https://discourse-cdn-sjc2.com; style-src 'self' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://discourse-cdn-sjc2.com; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com; img-src 'self' https://docs.gitea.io https://discourse.gitea.io https://opencollective.com https://discourse-cdn-sjc2.com; frame-src 'self' https://discourse.gitea.io;
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff