... | ... | @@ -132,6 +132,7 @@ server { |
|
|
listen [::]:443 ssl http2; # For ipv6 only
|
|
|
server_name date.example.org;
|
|
|
|
|
|
# This must be adapted if you use cdn or stats scripts.
|
|
|
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'none'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self'";
|
|
|
add_header Referrer-Policy "strict-origin";
|
|
|
|
... | ... | |