basicSsl() removal ; Commenting CSP in index.html for dev

This commit is contained in:
LC mac
2026-02-19 23:39:49 +08:00
parent f1b0c0738e
commit 02f58f5ef0
3 changed files with 30 additions and 9 deletions

View File

@@ -1,5 +1,16 @@
/*
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'none'; font-src 'self'; object-src 'none'; media-src 'self' blob:; base-uri 'self'; form-action 'none'; frame-ancestors 'none';
Cloudflare Pages headers for SeedPGP Web
This file must be named _headers at build output root, or in public/_headers,
depending on your deployment setup.
*/
/*
Catch-all for the app
*/
/
/* Security headers */
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' blob: data:; font-src 'self'; object-src 'none'; media-src 'self' blob:; base-uri 'self'; form-action 'none'; frame-ancestors 'none';
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer