blog/source/_headers

/*
  Content-Security-Policy: default-src 'self'; child-src 'none'; connect-src 'none'; font-src 'none'; frame-src 'none'; img-src 'self'; manifest-src 'self'; media-src 'none'; object-src 'none'; prefetch-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; base-uri 'none'; form-action https://duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion; frame-ancestors 'none'; block-all-mixed-content; sandbox allow-forms allow-scripts
  Expires: 0
  Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), usb=(), web-share=(self), xr-spatial-tracking=(), interest-cohort=()
  Referrer-Policy: no-referrer
  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
  X-Content-Type-Options: nosniff
  X-Frame-Options: DENY
  X-XSS-Protection: 1; mode=block
  X-Robots-Tag: noindex
Add Netlify header file A separate header file is necessary, even though header rule exists in netlify.toml Revert aab11bcf14e9ca7b57d5cda5b9a41bf8d8b0f498 2018-10-01 05:26:20 +00:00			`/*`
fix(csp): allow web manifest - this site does use it * https://gitlab.com/curben/blog/-/blob/master/source/site.webmanifest 2021-11-18 08:33:26 +00:00			`Content-Security-Policy: default-src 'self'; child-src 'none'; connect-src 'none'; font-src 'none'; frame-src 'none'; img-src 'self'; manifest-src 'self'; media-src 'none'; object-src 'none'; prefetch-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; base-uri 'none'; form-action https://duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion; frame-ancestors 'none'; block-all-mixed-content; sandbox allow-forms allow-scripts`
style(headers): sort alphabetically 2020-05-15 02:42:46 +00:00			`Expires: 0`
fix(headers): Permissions-Policy syntax - remove Feature-Policy 2023-02-11 23:58:59 +00:00			Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), usb=(), web-share=(self), xr-spatial-tracking=(), interest-cohort=()
refactor: unify HTTP header settings into _headers 2019-05-26 05:39:27 +00:00			`Referrer-Policy: no-referrer`
ci(netlify): enable hsts preload 2020-08-07 06:29:45 +00:00			`Strict-Transport-Security: max-age=31536000; includeSubDomains; preload`
style(headers): sort alphabetically 2020-05-15 02:42:46 +00:00			`X-Content-Type-Options: nosniff`
			`X-Frame-Options: DENY`
			`X-XSS-Protection: 1; mode=block`
build: remove netlify mirror from search result 2021-02-26 20:36:28 +00:00			`X-Robots-Tag: noindex`