all repos — zola-bearblog @ edfec31a52c4548100ba845dc16df4c046f59042

Port of bear blog theme to zola

Configure headers for netlify

Alan Pearce
commit

edfec31a52c4548100ba845dc16df4c046f59042

parent

a1bcb91851d84d3796a8a281af8d01ce0a79a3fc

1 file changed, 10 insertions(+), 0 deletions(-)

jump to
M netlify.toml → netlify.toml
@@ -13,3 +13,13 @@ # `$DEPLOY_PRIME_URL`.
 
 [context.deploy-preview]
 command = "zola build --base-url $DEPLOY_PRIME_URL"
+
+[[headers]]
+  for = "/*"
+  [headers.values]
+    X-Frame-Options = "DENY"
+    X-Content-Type-Options = "nosniff"
+    X-XSS-Protection = "1; mode=block"
+    Referrer-Policy = "strict-origin-when-cross-origin"
+    Strict-Transport-Security = "max-age=63072000; includeSubdomains"
+    Content-Security-Policy = "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'none'; style-src 'unsafe-inline'; frame-ancestors 'none'"