mirror of
				https://gitee.com/gitea/gitea
				synced 2025-11-04 16:40:24 +08:00 
			
		
		
		
	Final CSP header fix (#4432)
This commit is contained in:
		
				
					committed by
					
						
						Lunny Xiao
					
				
			
			
				
	
			
			
			
						parent
						
							a7f90905df
						
					
				
				
					commit
					e6b51200ab
				
			
							
								
								
									
										2
									
								
								docs/static/_headers
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										2
									
								
								docs/static/_headers
									
									
									
									
										vendored
									
									
								
							@@ -1,5 +1,5 @@
 | 
				
			|||||||
/*
 | 
					/*
 | 
				
			||||||
  Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://fonts.gstatic.com
 | 
					  Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com
 | 
				
			||||||
  X-Frame-Options: DENY
 | 
					  X-Frame-Options: DENY
 | 
				
			||||||
  X-Xss-Protection: 1; mode=block
 | 
					  X-Xss-Protection: 1; mode=block
 | 
				
			||||||
  X-Content-Type-Options: nosniff
 | 
					  X-Content-Type-Options: nosniff
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user