Remove Content-Security-Policy header

merge-requests/1/merge
bom 2 years ago
parent 5ef80e7710
commit 4cce1da4cb

@ -84,7 +84,6 @@ data:
ssl_certificate_key /etc/certs/tls.key;
server_name FQDN
add_header Strict-Transport-Security 'max-age=31536000; includeSubDomains; preload';
add_header Content-Security-Policy "default-src 'self'; font-src *;img-src * data:; script-src *; style-src *";
add_header X-XSS-Protection "1; mode=block";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options nosniff;

Loading…
Cancel
Save