csp vylepšení

Author: peldax

server/000-infinityloop.conf

@@ -44,7 +44,7 @@ ServerSignature Off
     SSLCertificateKeyFile /etc/letsencrypt/live/infinityloop.cz/privkey.pem
 
     Header always set Feature-Policy "accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'"
-    Header always set Content-Security-Policy "default-src 'none'; style-src 'self'; img-src 'self'; script-src 'none'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'"
+    Header always set Content-Security-Policy "default-src 'none'; style-src 'self' https://fonts.googleapis.com/; font-src https://fonts.gstatic.com/; img-src 'self'; script-src 'none'; object-src 'none'; manifest-src: 'self'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'"
     Header always set X-XSS-Protection 1;mode=block
     Header always set X-Content-Type-Options nosniff
     Header always set X-Frame-Options SAMEORIGIN