ComputerBas

Bas

Administrator

Geregistreerd: 2019-11-10

Posts: 96

Content-Security-Policy header example

Example with frame source included:

Header always set Content-Security-Policy "default-src 'none'; media-src 'self'; object-src 'none'; font-src 'self'; frame-src 'self' https://gadgets.buienradar.nl; frame-ancestors 'none'; form-action 'self'; manifest-src 'self'; img-src data: 'self'; base-uri 'none'; style-src 'self'; child-src https://computerbas.nl https://www.computerbas.nl; connect-src 'self'; script-src 'self'; upgrade-insecure-requests;"