Drop the port in Content-Security-Policy
This commit is contained in:
parent
bb01e49a45
commit
e3fd157150
|
@ -25,7 +25,7 @@ server {
|
|||
listen 443 ssl;
|
||||
listen [::]:443 ssl;
|
||||
|
||||
add_header Content-Security-Policy "default-src https://{{ item.servername }}:433" always;
|
||||
add_header Content-Security-Policy "default-src https://{{ item.servername }}" always;
|
||||
add_header Permissions-Policy "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), notifications=(), payment=(), usb=()" always;
|
||||
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
||||
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
||||
|
|
Loading…
Reference in New Issue