27b24277e1
This has proven to be unhelpful and we don't need this kind of reporting with the simplicity of the site and policies.
10 lines
1.6 KiB
Plaintext
10 lines
1.6 KiB
Plaintext
add_header X-XSS-Protection "1; mode=block" always;
|
|
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
|
|
add_header X-Content-Type-Options "nosniff" always;
|
|
add_header X-Frame-Options "DENY" always;
|
|
add_header Referrer-Policy "no-referrer" always;
|
|
add_header Expect-CT "enforce, max-age=63072000" always;
|
|
add_header Public-Key-Pins "max-age=2592000; pin-sha256=\"YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=\"; pin-sha256=\"sRHdihwgkaib1P1gxX8HFszlD+7/gTfNvuAybgLPNis=\"; pin-sha256=\"C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M=\"; pin-sha256=\"LriBmSVtlQ5mMrHPaHY4Iws7CfRh02xsmzYSjz4h+n8=\"; pin-sha256=\"eW2nhOl4bUuSdQaqFTbvU3T1O50t4rs/YZr6tx57ebY=\"; pin-sha256=\"xd08KlMFjbCIiI+m2IsynNvlRbtN3ksXBvTCMsgJB1o=\"; pin-sha256=\"d98LhdpbmaCJqL+2TpjktRam60XXNxOwIaSAxurYk20=\"; pin-sha256=\"ERrDlxBt73tVuKWPnDZ5AH1zgGYhq9wVVddEowHBCeQ=\"; includeSubDomains" always;
|
|
add_header Content-Security-Policy "default-src 'none'; connect-src 'self' https://releases.grapheneos.org/; font-src 'self'; img-src 'self'; manifest-src 'self'; script-src 'self'; style-src 'self'; form-action 'none'; frame-ancestors 'none'; block-all-mixed-content; base-uri 'none'" always;
|
|
add_header Feature-Policy "accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; battery 'none'; camera 'none'; display-capture 'none'; document-domain 'none'; encrypted-media 'none'; fullscreen 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'none'; speaker 'none'; sync-xhr 'none'; usb 'none'; wake-lock 'none'; xr-spatial-tracking 'none'" always;
|