Source code of my website
🔒️ : add frame-ancestors directive
+2
+2
Caddyfile
+2
Caddyfile
···
8
8
header {
9
9
Strict-Transport-Security "max-age=63072000"
10
10
X-Content-Type-Options nosniff
11
+
11
12
Content-Security-Policy "
12
13
script-src 'self' codeka.io plausible.io;
13
14
connect-src 'self' codeka.io plausible.io;
14
15
frame-src 'self' plausible.io www.youtube-nocookie.com openfeedback.io;
16
+
frame-ancestors 'none';
15
17
img-src 'self' img.shields.io;
16
18
default-src 'self';
17
19
"