Add CSP to source (#287)

* Add CSP to source * Implement gruel's comment
coveo · Oct 16, 2023 · 5204421 · 5204421
1 parent 78aaca7
commit 5204421
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/_includes/_content-security-policy.html b/_includes/_content-security-policy.html
@@ -0,0 +1 @@
+<meta http-equiv="X-Content-Security-Policy" content="default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'none'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none';" />
diff --git a/_layouts/base.html b/_layouts/base.html
@@ -20,7 +20,7 @@
     <link rel="apple-touch-icon-precomposed" sizes="72x72" href="{{ site.github.url | replace: 'http://', '//' }}/images/apple-touch-icon-72x72-precomposed.png" />
     <link rel="apple-touch-icon-precomposed" href="{{ site.github.url | replace: 'http://', '//' }}/images/apple-touch-icon-precomposed.png" />
     <link href="{{ site.github.url | replace: 'http://', '//' }}/feed.xml" rel="alternate" type="application/rss+xml" title="{{ site.inc.title }}" />
-
+    {% include _content-security-policy.html %}
     <meta property="og:site_name" content="{{ site.title }}" />
     <meta name="twitter:card" content="summary" />