about summary refs log tree commit diff stats
path: root/netlify.toml
diff options
context:
space:
mode:
authorAlan Pearce2023-09-09 19:11:07 +0200
committerAlan Pearce2023-09-09 19:11:07 +0200
commitd10630da50a2b0e005ef0499190cc5cc898f0b06 (patch)
treed6f8a479ef106f7c93a82f970cc34456effece61 /netlify.toml
parentf51202d961e6d2337a96ef3552c4efced1fe2beb (diff)
downloadzola-bearblog-main.tar.lz
zola-bearblog-main.tar.zst
zola-bearblog-main.zip
Hash inline style in CSP HEAD main
openssl dgst -sha256 -binary < templates/style.html | openssl enc -base64
2Sbht7dvdhJX00j84akXy9AejYUf6sOM3OpwMxNiDXQ=
Diffstat (limited to 'netlify.toml')
-rw-r--r--netlify.toml2
1 files changed, 1 insertions, 1 deletions
diff --git a/netlify.toml b/netlify.toml
index b75399f..6be8468 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -22,4 +22,4 @@ command = "zola build --base-url $DEPLOY_PRIME_URL"
     X-XSS-Protection = "1; mode=block"
     Referrer-Policy = "strict-origin-when-cross-origin"
     Strict-Transport-Security = "max-age=63072000; includeSubdomains"
-    Content-Security-Policy = "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'none'; style-src 'unsafe-inline'; form-action 'none'; base-uri 'self'; frame-ancestors 'none'"
+    Content-Security-Policy = "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'none'; style-src 'sha256-2Sbht7dvdhJX00j84akXy9AejYUf6sOM3OpwMxNiDXQ='; form-action 'none'; base-uri 'self'; frame-ancestors 'none'"