Ver código fonte

CSP for vimeo

master
David Larlet 6 meses atrás
pai
commit
28603b6ff4
Acessado por: David Larlet <david@larlet.fr> ID da chave GPG: 3E2953A359E7E7BD
1 arquivos alterados com 1 adições e 1 exclusões
  1. 1
    1
      theme/root/.htaccess

+ 1
- 1
theme/root/.htaccess Ver arquivo

@@ -40,7 +40,7 @@ ExpiresByType application/x-font-woff2 "access plus 1 year"

Header always set Strict-Transport-Security "max-age=31536000; preload"
Header always set X-Frame-Options SAMEORIGIN
Header always set Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src * data:; media-src *"
Header always set Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src * data:; media-src *; frame-src 'self' https://player.vimeo.com; script-src 'self' 'unsafe-inline' https://player.vimeo.com"
Header always set X-Content-Type-Options nosniff
Header always set X-XSS-Protection "1; mode=block"
Header always set Referrer-Policy "origin"

Carregando…
Cancelar
Salvar