Add CSP header

Closes #29
This commit is contained in:
Yannik Rödel 2022-05-23 13:11:44 +02:00
parent 10be9637e7
commit e03d667511

View file

@ -7,6 +7,10 @@ include "@lighttpd@/share/lighttpd/doc/config/conf.d/mime.conf"
server.document-root = "@site@"
index-file.names = ( "index.html" )
setenv.set-response-header += (
"Content-Security-Policy" => "default-src 'self'; script-src 'self' 'unsafe-inline'; frame-ancestors 'none'",
)
url.redirect = (
# These are redirects from the old site - keep them so we don't hurt any
# search engine indexes!