My personal blog
hauleth.dev
blog
fix: add img and connection CSP policies
+1
-1
+1
-1
netlify.toml
+1
-1
netlify.toml
···
14
14
X-Frame-Options = "DENY"
15
15
X-XSS-Protection = "1; mode=block"
16
16
X-Content-Type-Options = "nosniff"
17
-
Content-Security-Policy = "default-src 'self'; script-src 'self' https://plausible.io"
17
+
Content-Security-Policy = "default-src 'self'; script-src 'self' https://plausible.io; connect-src https://plausible.io; img-src https:"
18
18
Permissions-Policy = "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), speaker-selection=()"
19
19
Referrer-Policy = "no-referrer-when-downgrade"
20
20