harden CSP and integrate CSP+RP into HTTP header

This commit is contained in:
Thomas Dedek
2019-12-23 14:19:22 +01:00
parent 0fa9f178aa
commit 8fd7432bde
3 changed files with 14 additions and 2 deletions

View File

@@ -2,8 +2,6 @@
<html lang="{{.Site.Language.Lang }}">
<head>
<title>Ecogood portal</title>
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; child-src 'none';">
<meta name="referrer" content="no-referrer">
<link rel="stylesheet" href="{{ "ecogood.css" | absURL }}"/>
<link rel="icon" href="{{ "favicon-cropped.webp" | absURL }}" sizes="32x32" />
<link rel="icon" href="{{ "favicon.webp" | absURL }}" sizes="192x192" />