diff --git a/nginx/secure-headers.conf b/nginx/secure-headers.conf index 88d6008..ea287dc 100644 --- a/nginx/secure-headers.conf +++ b/nginx/secure-headers.conf @@ -1,4 +1,4 @@ -add_header Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' https://esm.run https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com"; +add_header Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' https://esm.run https://cdn.jsdelivr.net https://telegram.org; font-src 'self' https://fonts.gstatic.com"; add_header X-Frame-Options "DENY"; add_header X-Content-Type-Options "nosniff"; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";