Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 644598a7 authored by Nivesh Krishna's avatar Nivesh Krishna
Browse files

update nginx csp headers

parent dd212003

etc/nginx/conf.d/spot.conf

+1 −1
Original line number Original line Diff line number Diff line
@@ -15,7 +15,7 @@ server { 
  server_name _;

  server_name _;





  add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";

  add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";

  add_header Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self'; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self' https://overpass-api.de; img-src 'self' data:;  data: https://*.tile.openstreetmap.org; frame-src https://www.youtube-nocookie.com https://player.vimeo.com https://www.dailymotion.com https://www.deezer.com https://www.mixcloud.com https://w.soundcloud.com https://embed.spotify.com";

  add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self'; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self' https://overpass-api.de; img-src 'self' data:; frame-src https://www.youtube-nocookie.com https://player.vimeo.com https://www.dailymotion.com https://www.deezer.com https://www.mixcloud.com https://w.soundcloud.com https://embed.spotify.com";

  add_header X-Frame-Options "SAMEORIGIN";

  add_header X-Frame-Options "SAMEORIGIN";





  root /var/www/spot;

  root /var/www/spot;