Add secure headers middlware in dev config

This commit is contained in:
Douze Bé 2024-10-21 17:13:31 +02:00
parent d1102dcf8b
commit c8e8dfae41

View file

@ -68,6 +68,16 @@ server:
# (client-block-end)
#
# #############################################
# Secure headers middleware
# #############################################
secure_headers:
preset: github
overrides:
# this allows you to use HTMX, and has unsafe-inline. Remove or consider in production
"Content-Security-Policy": "default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'unsafe-inline' 'self' https:; style-src 'self' https: 'unsafe-inline'"
# Worker Configuration
workers:
# specifies the worker mode. Options: