From c42f7bfebfdd228699c1757c393369a2c86876dc Mon Sep 17 00:00:00 2001 From: Thomas Heller Date: Mon, 25 Jun 2018 12:54:41 +0200 Subject: [PATCH] BKKVBU-2273 - changed CSP conf --- ...ev-web01-meine-krankenkasse-de.pixelpark.net.yaml | 12 ++---------- 1 file changed, 2 insertions(+), 10 deletions(-) diff --git a/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml b/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml index 66fd065f..010bb00e 100644 --- a/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml +++ b/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml @@ -10,10 +10,6 @@ accounts::users: apply: true sudo: true group: apache - bastian.gutschke: - apply: true - group: apache - sudo: true markus.baumann: apply: true group: apache @@ -25,10 +21,6 @@ accounts::users: apply: true sudo: true group: apache - romy.pohl: - apply: true - groups: - - apache santiago.nuneznegrillo: apply: true groups: @@ -138,8 +130,8 @@ infra::profile::apache::pp_vhosts: # X-XSS-Protection set by helmetjs (https://helmetjs.github.io/) # - 'set X-XSS-Protection: "1; mode=block"' - 'set X-Frame-Options: "ALLOW-FROM https://dev-cms01-meine-krankenkasse-de.pixelpark.net"' - - "set Content-Security-Policy: \"default-src 'self'; img-src 'self' webstats.pixelpark.com bkk-vorteilsrechner.de s.ytimg.com f.vimeocdn.com data:; font-src 'self' bkk-vorteilsrechner.de; style-src 'self' 'unsafe-inline' bkk-vorteilsrechner.de s.ytimg.com f.vimeocdn.com; script-src 'self' 'unsafe-inline' webstats.pixelpark.com bkk-vorteilsrechner.de s.ytimg.com f.vimeocdn.com www.googletagmanager.com; child-src 'self' bkk-vorteilsrechner.de www.youtube-nocookie.com player.vimeo.com www.googletagmanager.com; frame-ancestors 'self'\"" - - "set X-Content-Security-Policy: \"default-src 'self'; img-src 'self' webstats.pixelpark.com bkk-vorteilsrechner.de s.ytimg.com f.vimeocdn.com data:; font-src 'self' bkk-vorteilsrechner.de; style-src 'self' 'unsafe-inline' bkk-vorteilsrechner.de s.ytimg.com f.vimeocdn.com; script-src 'self' 'unsafe-inline' webstats.pixelpark.com bkk-vorteilsrechner.de s.ytimg.com f.vimeocdn.com www.googletagmanager.com; child-src 'self' bkk-vorteilsrechner.de www.youtube-nocookie.com player.vimeo.com www.googletagmanager.com; frame-ancestors 'self'\"" + - "set Content-Security-Policy: \"default-src 'self'; img-src 'self' webstats.pixelpark.com bkk-vorteilsrechner.de s.ytimg.com f.vimeocdn.com data:; font-src 'self' bkk-vorteilsrechner.de; style-src 'self' 'unsafe-inline' bkk-vorteilsrechner.de s.ytimg.com f.vimeocdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' webstats.pixelpark.com bkk-vorteilsrechner.de s.ytimg.com f.vimeocdn.com www.googletagmanager.com; child-src 'self' bkk-vorteilsrechner.de www.youtube-nocookie.com player.vimeo.com www.googletagmanager.com; frame-ancestors 'self'\"" + - "set X-Content-Security-Policy: \"default-src 'self'; img-src 'self' webstats.pixelpark.com bkk-vorteilsrechner.de s.ytimg.com f.vimeocdn.com data:; font-src 'self' bkk-vorteilsrechner.de; style-src 'self' 'unsafe-inline' bkk-vorteilsrechner.de s.ytimg.com f.vimeocdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' webstats.pixelpark.com bkk-vorteilsrechner.de s.ytimg.com f.vimeocdn.com www.googletagmanager.com; child-src 'self' bkk-vorteilsrechner.de www.youtube-nocookie.com player.vimeo.com www.googletagmanager.com; frame-ancestors 'self'\"" headers_ssl: - 'always set Strict-Transport-Security "max-age=31556926"' custom_fragment: | -- 2.39.5