We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 95235ef commit 30659a6Copy full SHA for 30659a6
2 files changed
docs/public/_headers
netlify.toml
@@ -17,3 +17,16 @@ fail_deploy_on_score_thresholds = "true"
17
accessibility = 1
18
best-practices = 1
19
seo = 1
20
+
21
+[[headers]]
22
+for = "/assets/*"
23
+[headers.values]
24
+Cache-Control = '''max-age=31536000,immutable'''
25
26
27
+for = "/*"
28
+[headers.value]
29
+Content-Security-Policy = "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://netlify-rum.netlify.app/netlify-rum.js; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.netlify.com; media-src 'self' data:; object-src 'none'; connect-src https://*.algolia.net https://*.algolianet.com;"
30
+X-Frame-Options = "DENY"
31
+X-Content-Type-Options = "nosniff"
32
+X-XSS-Protection = "1; mode=block"
0 commit comments