diff --git a/nginx/secure-headers.conf b/nginx/secure-headers.conf index f9c30ce..226a8e0 100644 --- a/nginx/secure-headers.conf +++ b/nginx/secure-headers.conf @@ -1,4 +1,4 @@ -add_header Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self' https://cdn.csasq.ru"; +add_header Content-Security-Policy "default-src 'self' https://cdn.csasq.ru; style-src 'self' 'unsafe-inline'; font-src 'self' https://cdn.csasq.ru"; add_header X-Frame-Options "DENY"; add_header X-Content-Type-Options "nosniff"; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";