make Content-Security-Policy stricter
1 file changed, 9 insertions(+), 3 deletions(-)
changed files
M config.toml → config.toml
@@ -18,16 +18,22 @@ [content-security-policy] default-src = [ "'none'", ] + form-action = [ + "'none'", + ] + base-uri = [ + "'none'", + ] image-src = [ "'self'", - "http://gc.zgo.at", + "https://gc.zgo.at", ] script-src = [ "'self'", - "http://gc.zgo.at", + "https://gc.zgo.at", ] style-src = [ - "'unsafe-inline'", + "'sha256-+7qCR9+91EXRy0dbbyuh8KDyQUJwTewM/EPr4b/IKoE='", ] frame-ancestors = [ "https://kagi.com",