security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

add back connect-src 'self' for Lighthouse

Browse Source 
This reverts commit d30566d8f6597fad50c950fdc7bee1f809445512.

This is needed by Lighthouse to fetch robots.txt and it's worth making a
harmless exception for it to work properly.

https://github.com/GoogleChrome/lighthouse/issues/4386
This commit is contained in:
Daniel Micay 2019-05-05 10:06:27 -04:00
parent e4fe3f1f7c
commit 302fa154f4
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
static/.htaccess
View File

@ -1,6 +1,6 @@
Options -indexes
Header always set Content-Security-Policy "default-src 'none'; connect-src https://seamlessupdate.app/; \
Header always set Content-Security-Policy "default-src 'none'; connect-src 'self' https://seamlessupdate.app/; \
font-src 'self'; img-src 'self'; manifest-src 'self'; script-src 'self'; style-src 'self'; \
form-action 'none'; frame-ancestors 'none'; block-all-mixed-content; base-uri 'none'; \
report-uri https://danielmicay.report-uri.com/r/d/csp/enforce"