Revoke csp headers for the time being
This commit is contained in:
@@ -85,9 +85,9 @@ config {
|
|||||||
compressCss = 1
|
compressCss = 1
|
||||||
typolinkEnableLinksAcrossDomains = 1
|
typolinkEnableLinksAcrossDomains = 1
|
||||||
additionalHeaders {
|
additionalHeaders {
|
||||||
10 {
|
# 10 {
|
||||||
header = Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-inline'
|
# header = Content-Security-Policy: default-src 'self' 'unsafe-inline'; connect-src 'self';
|
||||||
}
|
# }
|
||||||
20 {
|
20 {
|
||||||
header = Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
|
header = Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -103,9 +103,9 @@ config {
|
|||||||
content_from_pid_allowOutsideDomain = 1
|
content_from_pid_allowOutsideDomain = 1
|
||||||
inlineStyle2TempFile = 0
|
inlineStyle2TempFile = 0
|
||||||
additionalHeaders {
|
additionalHeaders {
|
||||||
10 {
|
# 10 {
|
||||||
header = Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-inline'
|
# header = Content-Security-Policy: default-src 'self' 'unsafe-inline'; connect-src 'self' https://my.ep-reisen.de/;
|
||||||
}
|
# }
|
||||||
20 {
|
20 {
|
||||||
header = Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
|
header = Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user