1
0
Fork 0
site-deployer/www.jotoho.de/Caddyfile
Jonas Tobias Hopusch 35d68a07cb
Remove plugin-types from CORS list in www.jotoho.de caddyfile
This setting was apparently removed from the CORS specification
2022-04-02 16:33:48 +02:00

8 lines
455 B
Caddyfile

http://www.jotoho.de
header Content-Security-Policy "default-src 'none'; base-uri 'self' https://jotoho.de https://*.jotoho.de; child-src 'none'; connect-src 'none'; font-src 'none'; frame-ancestors 'none'; img-src 'self' https://jotoho.de https://*.jotoho.de; media-src 'self' https://jotoho.de https://*.jotoho.de; object-src 'none'; style-src 'self'; worker-src 'none'; upgrade-insecure-requests; form-action 'none';"
file_server {
root /site/
}