From cf38b8d92bde6dd349f286ccfff4a77db9513b50 Mon Sep 17 00:00:00 2001
From: Alan Pearce
Date: Wed, 29 May 2024 17:47:49 +0200
Subject: make Content-Security-Policy stricter
---
config.toml | 12 +++++++++---
templates/count.html | 2 +-
2 files changed, 10 insertions(+), 4 deletions(-)
diff --git a/config.toml b/config.toml
index 70ed9f7..9f788e5 100644
--- a/config.toml
+++ b/config.toml
@@ -18,16 +18,22 @@ oidc_host = "https://id.alanpearce.eu/"
default-src = [
"'none'",
]
+ form-action = [
+ "'none'",
+ ]
+ base-uri = [
+ "'none'",
+ ]
image-src = [
"'self'",
- "http://gc.zgo.at",
+ "https://gc.zgo.at",
]
script-src = [
"'self'",
- "http://gc.zgo.at",
+ "https://gc.zgo.at",
]
style-src = [
- "'unsafe-inline'",
+ "'sha256-+7qCR9+91EXRy0dbbyuh8KDyQUJwTewM/EPr4b/IKoE='",
]
frame-ancestors = [
"https://kagi.com",
diff --git a/templates/count.html b/templates/count.html
index 4694cba..46d5ac4 100644
--- a/templates/count.html
+++ b/templates/count.html
@@ -1,6 +1,6 @@
