genuineparts/alltube
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Make the CSP compatible with debug tools

Browse source
This commit is contained in:
Pierre Rudloff 2020-10-19 23:43:33 +02:00
parent e2560cd9cb
commit 561b6c8370
6 changed files with 194 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

1
.htaccess
View file

@ -36,6 +36,5 @@ FileETag None
Header set X-Content-Type-Options nosniff
Header set X-XSS-Protection "1; mode=block"
Header set Referrer-Policy no-referrer
Header set Content-Security-Policy "default-src 'self'; object-src 'none'; script-src 'none'; style-src 'self' 'unsafe-inline'; img-src http:"
Header add Link "</css/fonts.css>; rel=preload, </css/style.css>; rel=preload" "expr=%{CONTENT_TYPE} =~ m#text/html#"
</ifmodule>