grewn0uille
/
infra
forked from AFPy/infra
1
0
Fork 0
Code Pull Requests Activity

CSPs

This commit is contained in:
Julien Palard 2024-02-02 09:04:34 +01:00
parent 1546584dfd
commit cb128c25f2
Signed by: mdk
GPG Key ID: 0EFC1AC1006886F8
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
pycon.fr.yml
View File

@ -59,6 +59,12 @@
add_header Strict-Transport-Security "max-age=63072000";
add_header X-Content-Type-Options "nosniff";
}
location ~ ^/2024/ {
add_header Content-Security-Policy "default-src 'none'; object-src 'self'; frame-ancestors 'self'; form-action 'none'; base-uri 'none'; frame-src 'self' https://framacarte.org; font-src 'self'; img-src 'self' https://openstreetmap.fr; script-src 'self' 'unsafe-inline' https://framasoft.org https://framacarte.org; style-src 'self' 'unsafe-inline'";
add_header Content-Security-Policy-Report-Only "default-src 'none'; object-src 'self'; frame-ancestors 'self'; form-action 'none'; base-uri 'none'; frame-src 'self' https://framacarte.org; font-src 'self'; img-src 'self' https://openstreetmap.fr; script-src 'self' https://framasoft.org https://framacarte.org; style-src 'self'";
add_header Strict-Transport-Security "max-age=63072000";
add_header X-Content-Type-Options "nosniff";
}
# Prevent browsers from incorrectly detecting non-scripts as scripts
add_header X-Content-Type-Options "nosniff";
rewrite ^/2018/$ /2018/fr/index/ last;