Add secure headers middlware in dev config
This commit is contained in:
parent
d1102dcf8b
commit
c8e8dfae41
1 changed files with 10 additions and 0 deletions
|
@ -68,6 +68,16 @@ server:
|
|||
# (client-block-end)
|
||||
#
|
||||
|
||||
# #############################################
|
||||
# Secure headers middleware
|
||||
# #############################################
|
||||
secure_headers:
|
||||
preset: github
|
||||
overrides:
|
||||
# this allows you to use HTMX, and has unsafe-inline. Remove or consider in production
|
||||
"Content-Security-Policy": "default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'unsafe-inline' 'self' https:; style-src 'self' https: 'unsafe-inline'"
|
||||
|
||||
|
||||
# Worker Configuration
|
||||
workers:
|
||||
# specifies the worker mode. Options:
|
||||
|
|
Loading…
Reference in a new issue