curben
/
blog
mirror of https://gitlab.com/curben/blog
1
0
Fork 0
Code Issues Releases Wiki Activity
blog/source/_headers

27 lines
1.2 KiB
Plaintext
Raw Normal View History

Add Netlify header file A separate header file is necessary, even though header rule exists in netlify.toml Revert aab11bcf14e9ca7b57d5cda5b9a41bf8d8b0f498
2018-10-01 05:26:20 +00:00
/*
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
feat: add Content-Language to HTTP header https://www.w3.org/International/questions/qa-http-and-lang https://www.w3.org/International/questions/qa-text-processing-vs-metadata
2019-05-27 02:19:41 +00:00
Content-Language: en
fix(CSP): no longer load directly from cdn - thanks for netlify reverse proxy
2019-09-03 16:42:21 +00:00
Content-Security-Policy: default-src 'self'; child-src 'none'; connect-src 'none'; font-src 'none'; frame-src 'none'; img-src 'self'; manifest-src 'none'; media-src 'none'; object-src 'none'; prefetch-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; base-uri 'none'; form-action https://duckduckgo.com; frame-ancestors 'none'; block-all-mixed-content
refactor: unify HTTP header settings into _headers
2019-05-26 05:39:27 +00:00
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=31536000
feat: enable cache * https://nullsweep.com/http-security-headers-a-complete-guide/ * https://codewithhugo.com/enable-cdn-netlify/
2019-07-21 03:52:13 +00:00
Feature-Policy: accelerometer 'none'; autoplay 'none'; camera 'none'; document.domain 'none'; display-capture 'none'; encrypted-media 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; sync-xhr 'none'; usb 'none'
Expires: 0
fix(headers): remove Server header
2019-09-09 00:50:53 +00:00
Server:
feat: enable cache * https://nullsweep.com/http-security-headers-a-complete-guide/ * https://codewithhugo.com/enable-cdn-netlify/
2019-07-21 03:52:13 +00:00
/*.html
Cache-Control: max-age=86400, public
/*.css
fix(header): reduce css cache to one day
2019-09-09 01:50:04 +00:00
Cache-Control: max-age=86400, public
feat: enable cache * https://nullsweep.com/http-security-headers-a-complete-guide/ * https://codewithhugo.com/enable-cdn-netlify/
2019-07-21 03:52:13 +00:00
/*.js
Cache-Control: max-age=604800, public
/*.ico
Cache-Control: max-age=604800, public
/*.png
Cache-Control: max-age=604800, public
/*.webp
Cache-Control: max-age=604800, public
/*.jpg
Cache-Control: max-age=604800, public