2021-12-01 07:08:18 +00:00
|
|
|
/*
|
|
|
|
|
Cache-Control: no-store, must-revalidate
|
|
|
|
|
Cross-Origin-Embedder-Policy: require-corp
|
|
|
|
|
Cross-Origin-Opener-Policy: same-origin
|
|
|
|
|
Strict-Transport-Security: max-age=63072000
|
|
|
|
|
X-Content-Type-Options: nosniff
|
|
|
|
|
X-Download-Options: noopen
|
|
|
|
|
X-Frame-Options: deny
|
2021-12-02 07:32:38 +00:00
|
|
|
X-XSS-Protection: 1; mode=block
|
2021-12-02 09:00:47 +00:00
|
|
|
Referrer-Policy: same-origin
|
2023-01-06 13:48:22 +00:00
|
|
|
Content-Security-Policy-Report-Only: default-src 'self'; img-src 'self' blob: data:; media-src 'self' blob:; style-src 'self' 'unsafe-inline'; font-src 'self'; script-src 'self' 'unsafe-eval' blob:; manifest-src 'self'; child-src 'self' blob:; object-src 'none'; connect-src 'self' https://*.ente.io data: blob: https://ente-prod-eu.s3.eu-central-003.backblazeb2.com https://ente-prod-v3.s3.eu-central-2.wasabisys.com/ ; base-uri 'self'; frame-ancestors 'none'; form-action 'none'; report-uri https://csp-reporter.ente.io; report-to https://csp-reporter.ente.io;
|
2021-12-03 14:50:56 +00:00
|
|
|
|
