curben
/
blog
mirror of https://gitlab.com/curben/blog
1
0
Fork 0
Code Issues Releases Wiki Activity
blog/source/_headers

32 lines
1.5 KiB
Plaintext
Raw Normal View History

Add Netlify header file A separate header file is necessary, even though header rule exists in netlify.toml Revert aab11bcf14e9ca7b57d5cda5b9a41bf8d8b0f498
2018-10-01 05:26:20 +00:00
/*
ci(netlify): set default cache-control
2020-08-07 08:08:51 +00:00
Cache-Control: max-age=86400, public
fix(security-header): allow form to ddg .onion
2020-03-09 02:24:12 +00:00
Content-Security-Policy: default-src 'self'; child-src 'none'; connect-src 'none'; font-src 'none'; frame-src 'none'; img-src 'self'; manifest-src 'none'; media-src 'none'; object-src 'none'; prefetch-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; base-uri 'none'; form-action https://duckduckgo.com https://3g2upl4pq6kufc4m.onion; frame-ancestors 'none'; block-all-mixed-content
style(headers): sort alphabetically
2020-05-15 02:42:46 +00:00
Expires: 0
Feature-Policy: accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; camera 'none'; display-capture 'none'; document-domain 'none'; encrypted-media 'none'; fullscreen 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'none'; speaker 'none'; sync-xhr 'none'; usb 'none'; vibrate 'none'; vr 'none'; wake-lock 'none'; webauthn 'none'; xr-spatial-tracking 'none'
refactor: unify HTTP header settings into _headers
2019-05-26 05:39:27 +00:00
Referrer-Policy: no-referrer
ci(netlify): enable hsts preload
2020-08-07 06:29:45 +00:00
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
style(headers): sort alphabetically
2020-05-15 02:42:46 +00:00
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
feat: enable cache * https://nullsweep.com/http-security-headers-a-complete-guide/ * https://codewithhugo.com/enable-cdn-netlify/
2019-07-21 03:52:13 +00:00
/*.html
Cache-Control: max-age=86400, public
ci(netlify): set 1-day cache for *.xml
2020-08-07 06:27:25 +00:00
/*.xml
Cache-Control: max-age=86400, public
feat: enable cache * https://nullsweep.com/http-security-headers-a-complete-guide/ * https://codewithhugo.com/enable-cdn-netlify/
2019-07-21 03:52:13 +00:00
/*.css
ci(netlify): increase *.css cache to 1-week
2020-08-05 08:17:06 +00:00
Cache-Control: max-age=604800, public
feat: enable cache * https://nullsweep.com/http-security-headers-a-complete-guide/ * https://codewithhugo.com/enable-cdn-netlify/
2019-07-21 03:52:13 +00:00
/*.js
Cache-Control: max-age=604800, public
ci(netlify): increase *.svg cache to 1-week
2020-08-05 08:31:56 +00:00
/*.svg
Cache-Control: max-age=604800, public
fix(header): cache gif
2019-09-09 01:51:46 +00:00
/*.gif
Cache-Control: max-age=604800, public
feat: enable cache * https://nullsweep.com/http-security-headers-a-complete-guide/ * https://codewithhugo.com/enable-cdn-netlify/
2019-07-21 03:52:13 +00:00
/*.ico
Cache-Control: max-age=604800, public
fix(header): cache gif
2019-09-09 01:51:46 +00:00
/*.jpg
Cache-Control: max-age=604800, public
feat: enable cache * https://nullsweep.com/http-security-headers-a-complete-guide/ * https://codewithhugo.com/enable-cdn-netlify/
2019-07-21 03:52:13 +00:00
/*.png
Cache-Control: max-age=604800, public
/*.webp
Cache-Control: max-age=604800, public