eriol
/
ansible-collection-kit
1
0
Fork 0
Code Releases Activity

Separate default-src and style-src directives

This commit is contained in:
Daniele Tricoli 2021-02-13 05:02:29 +01:00
parent 729108e47f
commit 21aba7969b
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/nginx/templates/etc/nginx/sites-available/site-vhost.j2
View File

@ -25,7 +25,7 @@ server {
listen 443 ssl;
listen [::]:443 ssl;
add_header Content-Security-Policy "default-src https://{{ item.servername }} style-src https://{{ item.servername }} 'unsafe-inline'" always;
add_header Content-Security-Policy "default-src https://{{ item.servername }}; style-src https://{{ item.servername }} 'unsafe-inline'" always;
add_header Permissions-Policy "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), notifications=(), payment=(), usb=()" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;