hauleth.dev / blog
My personal blog hauleth.dev
blog
0
fork

Configure Feed

Select the types of activity you want to include in your feed.

fix: add security headers

Łukasz Niemier 93db1303 a268358e

+4
+4
netlify.toml
··· 13 13 # Disallow showing the website in frames 14 14 X-Frame-Options = "DENY" 15 15 X-XSS-Protection = "1; mode=block" 16 + X-Content-Type-Options = "nosniff" 17 + Content-Security-Policy-Only = "default-src 'self'; script-src 'self' https://plausible.io" 18 + Permissions-Policy = "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), speaker-selection=()" 19 + Referrer-Policy = "no-referrer-when-downgrade" 16 20 17 21 [[redirects]] 18 22 from = "/post"