diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2020-09-27 19:10:27 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2020-09-27 19:10:27 -0400 |
| commit | 99b4037444ebfc29be635fe2c903e1544f16401d (patch) | |
| tree | c49bbb6db6e8498a9b3b9ff26aeadcd8342d34db /nginx/snippets | |
| parent | f59b4f231012c601b88d42fb41fbb8780ab3e089 (diff) | |
disable unused publickey-credentials-get feature
Diffstat (limited to 'nginx/snippets')
| -rw-r--r-- | nginx/snippets/security-headers.conf | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nginx/snippets/security-headers.conf b/nginx/snippets/security-headers.conf index 68aca3d6..87de260e 100644 --- a/nginx/snippets/security-headers.conf +++ b/nginx/snippets/security-headers.conf @@ -5,4 +5,4 @@ add_header X-Frame-Options "DENY" always; add_header Referrer-Policy "no-referrer" always; add_header Expect-CT "enforce, max-age=63072000" always; add_header Content-Security-Policy "default-src 'none'; connect-src 'self' https://releases.grapheneos.org/; font-src 'self'; img-src 'self'; manifest-src 'self'; script-src 'self'; style-src 'self'; form-action 'none'; frame-ancestors 'none'; block-all-mixed-content; base-uri 'none'" always; -add_header Feature-Policy "accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; battery 'none'; camera 'none'; display-capture 'none'; document-domain 'none'; encrypted-media 'none'; fullscreen 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'none'; screen-wake-lock 'none'; sync-xhr 'none'; usb 'none'; xr-spatial-tracking 'none'" always; +add_header Feature-Policy "accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; battery 'none'; camera 'none'; display-capture 'none'; document-domain 'none'; encrypted-media 'none'; fullscreen 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'none'; publickey-credentials-get 'none'; screen-wake-lock 'none'; sync-xhr 'none'; usb 'none'; xr-spatial-tracking 'none'" always; |