Skip to content

csp setup 2 #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
katrielalex wants to merge 22 commits into
base: main
Choose a base branch
from
Open

csp setup 2 #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
a8d8118
remove noscript
katrielalex Sep 10, 2021
da55a95
csp headers to netlify
katrielalex Sep 20, 2021
6b1fa1c
remove google analytics
katrielalex Sep 20, 2021
d319e9e
csp report uri
katrielalex Sep 20, 2021
3c9ec78
add amp
katrielalex Sep 20, 2021
63818d6
add more options
katrielalex Sep 20, 2021
e2fafe8
oopsie
katrielalex Sep 20, 2021
e7d1bbd
oopsie 2
katrielalex Sep 20, 2021
e120246
oopsie 4
katrielalex Sep 20, 2021
1e0704a
oopsie 3
katrielalex Sep 20, 2021
daddd45
oopsie 5
katrielalex Sep 20, 2021
e30a199
oopsie 6
katrielalex Sep 20, 2021
cd245a4
oopsie 7
katrielalex Sep 20, 2021
8a3e3ef
oopsie 8
katrielalex Sep 20, 2021
17f6533
oopsie 9
katrielalex Sep 20, 2021
3fd4d16
oopsie 10
katrielalex Sep 20, 2021
445c245
oopsie 11
katrielalex Sep 20, 2021
39e5e38
oopsie 11
katrielalex Sep 20, 2021
ec97ad1
oopsie
katrielalex Sep 20, 2021
0114a2c
oopsie
katrielalex Sep 20, 2021
ea147da
oopsie
katrielalex Sep 20, 2021
14a40ec
Merge branch 'main' into csp-setup-2
katrielalex Sep 20, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions _headers
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
/*
Report-To: '{"group":"default","max_age":31536000,"endpoints":[{"url":"https://katriel.report-uri.com/a/d/g"}],"include_subdomains":true}'

NEL: '{"report_to":"default","max_age":31536000,"include_subdomains":true}'

Content-Security-Policy: default-src 'none'; script-src 'report-sample' 'self' https://cdn.ampproject.org; style-src 'report-sample' 'self' https://fonts.googleapis.com 'sha256-0+eUWXEzIzayXtwbs4qgGqcUroB222vieZ1QP7fQ6so=' 'sha256-PGXOJdY/N14DFaumETOevn4XJmmnEBUq35DEE7PwXzI=' 'sha256-ERzu1wweqgxgsinDVzlR2NhKKo4DjFon34MAwo+xvWM=' 'sha256-PQYtiIZYTtt8E9hjj3jfnmSZ5QHVzfzJgN3hZ+uDKA0='; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-ancestors 'none'; frame-src 'self'; img-src 'self' https://*.cloudfront.net; manifest-src 'self'; media-src 'self'; report-uri https://katriel.report-uri.com/r/d/csp/reportOnly; report-to report-uri; worker-src 'none';

X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1;mode=block
Referrer-Policy: no-referrer, strict-origin-when-cross-origin
11 changes: 6 additions & 5 deletions index.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,11 +48,12 @@
<meta name="msapplication-TileColor" content="#00a300">
<meta name="theme-color" content="#ffffff">

<link rel="preload" as="image" href="katriel.jpg" />
<link type="text/css" rel="stylesheet" href="https://fonts.googleapis.com/css?family=Lato:300italic,700italic,300,700" />
<!-- AMP boilerplate -->
<style amp-boilerplate>body{-webkit-animation:-amp-start 8s steps(1,end) 0s 1 normal both;-moz-animation:-amp-start 8s steps(1,end) 0s 1 normal both;-ms-animation:-amp-start 8s steps(1,end) 0s 1 normal both;animation:-amp-start 8s steps(1,end) 0s 1 normal both}@-webkit-keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}@-moz-keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}@-ms-keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}@-o-keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}@keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}</style>

<!-- magical "don't block render on this stylesheet" -->
<link rel="preload" href="https://fonts.googleapis.com/css?family=Lato:300italic,700italic,300,700&display=swap" as="style" onload="this.onload=null;this.rel='stylesheet'">
<noscript><link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Lato:300italic,700italic,300,700&display=swap"></noscript>

<!-- stylesheets inline for Reasons -->
<style>
Expand Down Expand Up @@ -400,9 +401,9 @@
.sc { font-variant: small-caps; }
</style>

<!--[if lt IE 9]>
<script src="//html5shiv.googlecode.com/svn/trunk/html5.js"></script>
<![endif]-->
<!-- We're already AMP so let's support it for the little lightning bolt -->
<script async type="text/javascript"
src="https://cdn.ampproject.org/v0.js" integrity="sha384-PsO+HTrUDj2ccAEQhe0lAPwaYosAuZgcMOXkNebt5B+FSWfKvx7fGfL0MYy+Im5x" crossorigin="anonymous"></script>
</head>
<body>
<div class="wrapper">
Expand Down