Repository navigation
Expand file tree
/
Copy pathcustomHttp.yml
More file actions
30 lines (30 loc) · 1.93 KB
/
Copy pathcustomHttp.yml
File metadata and controls
30 lines (30 loc) · 1.93 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
customHeaders:
- pattern: '**'
headers:
- key: Strict-Transport-Security
value: max-age=31536000; includeSubDomains
- key: X-Frame-Options
value: SAMEORIGIN
- key: X-XSS-Protection
value: 1; mode=block
- key: X-Content-Type-Options
value: nosniff
- key: Referrer-Policy
value: no-referrer
- key: Permissions-Policy
value: >-
accelerometer=(), camera=(), geolocation=(), gyroscope=(),
magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()
- key: Content-Security-Policy
value: >-
report-uri https://csp-report-to.security.cdssandbox.xyz/report;
default-src 'self' https://kit.fontawesome.com/ https://cdn.jsdelivr.net/npm/;
font-src 'self' fonts.gstatic.com https://unpkg.com/font-awesome@4.7.0/ https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cdn.design-system.alpha.canada.ca/@cdssnc/ https://cdn.design-system.alpha.canada.ca/@gcds-core/ https://cdn.design-system.canada.ca/@gcds-core/;
script-src 'self' 'wasm-unsafe-eval' https://cdn.design-system.canada.ca https://cdn.design-system.alpha.canada.ca www.googletagmanager.com www.google-analytics.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cdn.jsdelivr.net/npm/ https://assets.adobedtm.com 'unsafe-inline';
frame-src www.googletagmanager.com www.google-analytics.com https://cds-snc.github.io/ https://design-system.canada.ca/ https://systeme-design.canada.ca/ https://design-system.alpha.canada.ca/ https://systeme-design.alpha.canada.ca/;
connect-src 'self' www.googletagmanager.com www.google-analytics.com www.canada.ca https://registry.npmjs.org;
img-src 'self' data: https: www.w3.org;
style-src 'unsafe-inline' https: 'strict-dynamic' 'self' https://fonts.googleapis.com;
base-uri 'self';
form-action 'self';
object-src 'none'