blog/source/_headers

/*
  Content-Security-Policy: default-src 'self'; child-src 'none'; connect-src 'none'; font-src 'none'; frame-src 'none'; img-src 'self'; manifest-src 'self'; media-src 'none'; object-src 'none'; prefetch-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; base-uri 'none'; form-action https://duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion; frame-ancestors 'none'; block-all-mixed-content; sandbox allow-forms allow-scripts
  Expires: 0
  Permissions-Policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), browsing-topics=(), camera=(), compute-pressure=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), usb=(), web-share=(self), window-management=(), xr-spatial-tracking=(), interest-cohort=()
  Referrer-Policy: no-referrer
  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
  X-Content-Type-Options: nosniff
  X-Frame-Options: DENY
  X-XSS-Protection: 1; mode=block
  X-Robots-Tag: noindex
Add Netlify header file A separate header file is necessary, even though header rule exists in netlify.toml Revert aab11bcf14e9ca7b57d5cda5b9a41bf8d8b0f498 2018-10-01 05:26:20 +00:00			`/*`
fix(csp): allow web manifest - this site does use it * https://gitlab.com/curben/blog/-/blob/master/source/site.webmanifest 2021-11-18 08:33:26 +00:00			`Content-Security-Policy: default-src 'self'; child-src 'none'; connect-src 'none'; font-src 'none'; frame-src 'none'; img-src 'self'; manifest-src 'self'; media-src 'none'; object-src 'none'; prefetch-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; base-uri 'none'; form-action https://duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion; frame-ancestors 'none'; block-all-mixed-content; sandbox allow-forms allow-scripts`
style(headers): sort alphabetically 2020-05-15 02:42:46 +00:00			`Expires: 0`
chore(headers): update permissions-policy 2025-01-14 09:14:12 +00:00			Permissions-Policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), browsing-topics=(), camera=(), compute-pressure=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), usb=(), web-share=(self), window-management=(), xr-spatial-tracking=(), interest-cohort=()
refactor: unify HTTP header settings into _headers 2019-05-26 05:39:27 +00:00			`Referrer-Policy: no-referrer`
ci(netlify): enable hsts preload 2020-08-07 06:29:45 +00:00			`Strict-Transport-Security: max-age=31536000; includeSubDomains; preload`
style(headers): sort alphabetically 2020-05-15 02:42:46 +00:00			`X-Content-Type-Options: nosniff`
			`X-Frame-Options: DENY`
			`X-XSS-Protection: 1; mode=block`
build: remove netlify mirror from search result 2021-02-26 20:36:28 +00:00			`X-Robots-Tag: noindex`