Update _headers

MarcelMichau · Nov 20, 2024 · 383ad9a · 383ad9a
1 parent f61f8f4
commit 383ad9a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/_headers b/src/_headers
@@ -1,5 +1,5 @@
 /*
-  Content-Security-Policy: default-src 'none'; script-src 'self'; script-src-elem 'self'; style-src 'self'; connect-src 'self'; manifest-src 'self'; font-src 'self'; img-src 'self'; object-src 'none'; block-all-mixed-content; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; report-to https://b7ca037389ec9bb8220abf11b8d6540c.report-uri.com/r/d/csp/enforce; report-uri https://b7ca037389ec9bb8220abf11b8d6540c.report-uri.com/r/d/csp/enforce;
+  Content-Security-Policy: default-src 'none'; script-src 'self'; script-src-elem 'self'; style-src 'self'; connect-src 'self'; manifest-src 'self'; font-src 'self'; img-src 'self'; object-src 'none'; block-all-mixed-content; frame-ancestors 'none'; base-uri 'none'; form-action 'none';
   Access-Control-Allow-Origin: https://marcelmichau.dev
   X-Xss-Protection: 1; mode=block
   X-Frame-Options: DENY
@@ -8,4 +8,4 @@
   Permissions-Policy: camera=(), microphone=(), geolocation=(), accelerometer=(), gyroscope=(), autoplay=(), interest-cohort=()
   Cross-Origin-Embedder-Policy: require-corp
   Cross-Origin-Opener-Policy: same-origin
-  Cross-Origin-Resource-Policy: same-origin
+  Cross-Origin-Resource-Policy: same-origin