try out csp (#2215)

2018-11-19 09:19:49 +01:00 · 2018-11-19 09:19:49 +01:00 · 9569cbdee5
parent b25b30fbe6
commit 9569cbdee5
1 changed files with 2 additions and 1 deletions
--- a/docs/_headers
+++ b/docs/_headers
@ -2,7 +2,8 @@
 	X-Content-Type-Options: nosniff
 	x-frame-options: SAMEORIGIN
 	X-XSS-Protection: 1; mode=block
-	Referrer-Policy: no-referrer	
+	Referrer-Policy: no-referrer
+	Content-Security-Policy-Report-Only: default-src 'self'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; child-src 'https://www.youtube.com';	

 /img/*
        Cache-Control: public, max-age=360000