about summary refs log tree commit diff stats
path: root/Caddyfile
diff options
context:
space:
mode:
authorAlan Pearce2023-09-11 17:56:22 +0200
committerAlan Pearce2023-09-11 17:56:22 +0200
commitc936c99fad7e090a3caaaa6bdd5fbaf38d39abba (patch)
tree77bc44a05c04b7ba25fe291b76b8569971a3c213 /Caddyfile
parentad65cd42eb600a4c9ae2cd2a27b28d3d6a50088f (diff)
downloadwebsite-c936c99fad7e090a3caaaa6bdd5fbaf38d39abba.tar.lz
website-c936c99fad7e090a3caaaa6bdd5fbaf38d39abba.tar.zst
website-c936c99fad7e090a3caaaa6bdd5fbaf38d39abba.zip
Improve CSP setup
Diffstat (limited to 'Caddyfile')
-rw-r--r--Caddyfile2
1 files changed, 1 insertions, 1 deletions
diff --git a/Caddyfile b/Caddyfile
index d234c87..c779358 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -55,7 +55,7 @@ http://alanpearce.eu {
 		Cache-Control max-age=14400
 		X-Content-Type-Options nosniff
 		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
-		Content-Security-Policy "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'none'; style-src 'unsafe-inline'"
+		Content-Security-Policy "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'none'; style-src 'unsafe-inline'; form-action 'none'; base-uri 'self'"
 	}
 	handle_errors {
 		@404 expression `{err.status_code} == 404`