From 1f58b1f1262d14f1e9dbbfb4754c83458a7f09f6 Mon Sep 17 00:00:00 2001 From: sambufe Date: Mon, 10 Apr 2017 16:27:28 +0200 Subject: [PATCH] added csp header on prd orat --- customer/fbb-orat/production.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/customer/fbb-orat/production.yaml b/customer/fbb-orat/production.yaml index 2390ba9f..d3225e2a 100644 --- a/customer/fbb-orat/production.yaml +++ b/customer/fbb-orat/production.yaml @@ -43,7 +43,7 @@ infra::profile::wordpress::projects: - 'set Cache-Control "private, no-cache, no-store, must-revalidate, max-age=0"' - 'set Pragma "no-cache"' - 'set Expires 0' -# - "set Content-Security-Policy: \"default-src 'self' www.youtube.com; img-src 'self' *.fbcdn.net secure.gravatar.com *.google-analytics.com *.facebook.com www.google.com www.youtube.com *.doubleclick.net data:; font-src 'self' fonts.gstatic.com data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.addthis.com *.addthisedge.com *.google-analytics.com *.facebook.com www.google.com www.youtube.com *.doubleclick.net; child-src 'self' *.facebook.com; frame-ancestors 'self';\"" + - "set Content-Security-Policy: \"default-src 'self' www.youtube.com; img-src 'self' *.fbcdn.net secure.gravatar.com *.google-analytics.com *.facebook.com www.google.com www.youtube.com *.doubleclick.net data:; font-src 'self' fonts.gstatic.com data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.addthis.com *.addthisedge.com *.google-analytics.com *.facebook.com www.google.com www.youtube.com *.doubleclick.net; child-src 'self' *.facebook.com; frame-ancestors 'self';\"" directories: - provider: location path: '/wp-admin/' -- 2.39.5