mirror of
https://github.com/tommytran732/tommytran.io
synced 2024-11-09 11:41:34 -05:00
Add upgrade-insecure-requests;
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
bfe3223316
commit
dbb966022f
@ -1,6 +1,6 @@
|
||||
/*
|
||||
Strict-Transport-Security : max-age=63072000; includeSubDomains; preload
|
||||
Content-Security-Policy : default-src 'none'; connect-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'; form-action 'none'; frame-ancestors 'none'; block-all-mixed-content; base-uri 'none'
|
||||
Content-Security-Policy : default-src 'none'; connect-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'; form-action 'none'; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; base-uri 'none'
|
||||
X-Content-Type-Options : nosniff
|
||||
Referrer-Policy : no-referrer
|
||||
X-Frame-Options : DENY
|
||||
@ -11,7 +11,7 @@
|
||||
# Cross-Origin-Opener-Policy : same-origin
|
||||
|
||||
/*.xml
|
||||
Content-Security-Policy : default-src 'none'; img-src 'self' data: https://www.w3.org/; style-src 'self' 'unsafe-inline'; block-all-mixed-content; base-uri 'none'
|
||||
Content-Security-Policy : default-src 'none'; img-src 'self' data: https://www.w3.org/; style-src 'self' 'unsafe-inline'; upgrade-insecure-requests; block-all-mixed-content; base-uri 'none'
|
||||
|
||||
/*.png
|
||||
Cross-Origin-Resource-Policy : cross-origin
|
||||
|
Loading…
Reference in New Issue
Block a user