feat: add csp header (#91)

inabagumi · Dec 12, 2019 · 87c7d59 · 87c7d59
1 parent 716febb
commit 87c7d59
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/now.json b/now.json
@@ -19,7 +19,9 @@
     {
       "continue": true,
       "headers": {
-        "cache-control": "max-age=600, s-maxage=120"
+        "cache-control": "max-age=600, s-maxage=120",
+        "content-security-policy": "base-uri 'none'; connect-src 'self' https:; default-src 'none'; form-action 'none'; font-src https://fonts.gstatic.com; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'unsafe-inline' https://fonts.googleapis.com; worker-src 'self'",
+        "referrer-policy": "same-origin, strict-origin-when-cross-origin"
       },
       "src": "/.*"
     },