Deuxfleurs
/
nixcfg
17
6
Fork 2
Code Issues 8 Pull Requests 1 Projects Releases Wiki Activity

remove default HTTP CSP, put your CSP in your HTML

This commit is contained in:
Quentin 2023-10-03 16:00:11 +02:00
parent 9e113416ac
commit 56e19ff2e5
Signed by: quentin
GPG Key ID: E9602264D639FF68
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
cluster/prod/app/garage/deploy/garage.hcl
View File

@ -134,7 +134,6 @@ job "garage" {
tags = [
"garage-web",
"tricot * 1",
"tricot-add-header Content-Security-Policy default-src https: 'unsafe-inline'; object-src 'none'",
"tricot-add-header Strict-Transport-Security max-age=63072000; includeSubDomains; preload",
"tricot-add-header X-Frame-Options SAMEORIGIN",
"tricot-add-header X-XSS-Protection 1; mode=block",