security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

use prefix match for fonts instead of regex

Browse Source
This commit is contained in:
Daniel Micay 2021-05-18 02:45:10 -04:00
parent ea67f9c6b2
commit ca24fdebc5
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
nginx/nginx.conf
View File

@ -238,6 +238,14 @@ http {
return 301 /; return 301 /;
} }
location ^~ /fonts/ {
include snippets/security-headers.conf;
add_header Cross-Origin-Resource-Policy "same-origin" always;
add_header Cache-Control "public, max-age=31536000, immutable";
gzip_static off;
brotli_static off;
}
location ~ "\.webmanifest$" { location ~ "\.webmanifest$" {
include snippets/security-headers.conf; include snippets/security-headers.conf;
add_header Cross-Origin-Resource-Policy "same-origin" always; add_header Cross-Origin-Resource-Policy "same-origin" always;
@ -257,14 +265,6 @@ http {
add_header Cache-Control "public, max-age=31536000"; add_header Cache-Control "public, max-age=31536000";
} }
location ~ "\.woff2$" {
include snippets/security-headers.conf;
add_header Cross-Origin-Resource-Policy "same-origin" always;
add_header Cache-Control "public, max-age=31536000, immutable";
gzip_static off;
brotli_static off;
}
location ~ "\.png$" { location ~ "\.png$" {
include snippets/security-headers.conf; include snippets/security-headers.conf;
# avoid breaking image hotlinking such as https://github.com/TryGhost/Ghost/issues/12880 # avoid breaking image hotlinking such as https://github.com/TryGhost/Ghost/issues/12880