summaryrefslogtreecommitdiff
path: root/nginx/snippets/security-headers.conf
AgeCommit message (Expand)Author
2025-06-27treewide: build via nixOphestra
2023-07-11drop legacy block-all-mixed-contentDaniel Micay
2023-07-10block WebRTC in Content Security PolicyDaniel Micay
2022-10-11disable bluetooth in Permissions PolicyDaniel Micay
2022-10-11disable keyboard-map in Permissions PolicyDaniel Micay
2022-10-11disable local-fonts in Permissions PolicyDaniel Micay
2022-04-18add gamepad and speaker-selection to permissions policyJune
2021-11-24disable idle-detection in Permissions-PolicyDaniel Micay
2021-04-18disable unused Clipboard API featuresDaniel Micay
2021-04-18disable unused hid (WebHID API) featureDaniel Micay
2021-04-18disable unused serial (Web Serial API) featureDaniel Micay
2021-04-18disable interest-cohort featureDaniel Micay
2021-03-26enforce strict Trusted Types without policiesDaniel Micay
2021-01-26drop support for obsolete Feature-Policy headerDaniel Micay
2021-01-23temporarily disable Trusted Types for web-installDaniel Micay
2021-01-05add foundation for WebUSB-based install pageDaniel Micay
2020-12-31document deprecated/obsolete headersDaniel Micay
2020-10-27add require-trusted-types-for 'script' to CSPDaniel Micay
2020-10-27add COOP / COEP headersDaniel Micay
2020-10-03add Permissions-Policy headerDaniel Micay
2020-09-27disable unused publickey-credentials-get featureDaniel Micay
2020-09-27remove unused Feature-Policy speaker directiveDaniel Micay
2020-09-27handle Feature-Policy standard renaming wake-lockDaniel Micay
2020-09-27drop (unfortunately) obsolete HPKP supportDaniel Micay
2020-07-22drop usage of report-uri for Expect-CT and CSPDaniel Micay
2020-04-19stop pinning IdenTrust root that's on the way outDaniel Micay
2020-04-07switch HPKP backup pinsDaniel Micay
2020-04-01remove obsolete HPKP report-uri URLDaniel Micay
2020-04-01add nginx configurationDaniel Micay