summaryrefslogtreecommitdiff
path: root/nginx
diff options
context:
space:
mode:
authorDaniel Micay <danielmicay@gmail.com>2021-11-18 18:50:44 -0500
committerDaniel Micay <danielmicay@gmail.com>2021-11-18 19:08:54 -0500
commit75f4b333232ee99cd6af146c08a66c6ee4865f98 (patch)
tree256d77eff66b5b8300fc0abde375047776d37b3a /nginx
parent61e13582028790192d61b367c6e605e50765db4b (diff)
set up SRI for future use by CSP v3
Diffstat (limited to 'nginx')
-rw-r--r--nginx/nginx.conf4
1 files changed, 2 insertions, 2 deletions
diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index efea91ca..61b901cb 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -74,7 +74,7 @@ http {
map $http_cookie $preload_resources {
"~*__Host-preload=1" "";
- default "</main.css>; rel=preload; as=style, </fonts/roboto-v20-regular-latin.woff2>; rel=preload; as=font; crossorigin, </fonts/roboto-v20-bold-latin.woff2>; rel=preload; as=font; crossorigin, </mask-icon.svg>; rel=preload; as=image";
+ default "<{{path|/main.css}}>; rel=preload; as=style, </fonts/roboto-v20-regular-latin.woff2>; rel=preload; as=font; crossorigin, </fonts/roboto-v20-bold-latin.woff2>; rel=preload; as=font; crossorigin, <{{path|/mask-icon.svg}}>; rel=preload; as=image";
}
server {
@@ -259,7 +259,7 @@ http {
add_header Cache-Control "public, max-age=604800";
}
- location = /mask-icon.svg {
+ location = {{path|/mask-icon.svg}} {
include snippets/security-headers.conf;
add_header Cross-Origin-Resource-Policy "same-origin" always;
add_header Cache-Control "public, max-age=31536000, immutable";