diff --git a/nginx/secure-headers.conf b/nginx/secure-headers.conf index 0a94df3..6c772ac 100644 --- a/nginx/secure-headers.conf +++ b/nginx/secure-headers.conf @@ -1,4 +1,4 @@ -add_header Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' https://esm.run https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:"; +add_header Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self' https://cdn.csasq.ru; img-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:"; add_header X-Frame-Options "DENY"; add_header X-Content-Type-Options "nosniff"; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";