Kaushal Modi
|
79825086e8
|
Remove integrity check for the locally served .js scripts #doc
From
https://securityheaders.com/?q=https%3A%2F%2Fox-hugo.scripter.co&followRedirects=on,
it's not advisable to enable CORS for non-public CDN.
> Access-Control-Allow-Origin This is a very lax CORS policy. Such a
policy should only be used on a public CDN.
|
8 years ago |
|
Kaushal Modi
|
ceb0a3d4a2
|
Enable CORS #doc site
To allow the locally served jquery.js, etc to be SRI verified.
|
8 years ago |
|
Kaushal Modi
|
cf05d9f568
|
Add hashes for Privacy Badger injected scripts #csp
Privacy Badger version 2018.04.23:
- 'sha256-kNsowQfHpWMrbQG7AtSzSuMQg2t/YKwmDWdqeKfm4BI='
- 'sha256-afSIEhWGAPlY458Q4YkhPLVnsVEBh/u5YNlpg6od8TU='
- https://github.com/EFForg/privacybadger/issues/1793#issuecomment-385520982
- 29fc983ac7/netlify.toml (L174-199)
|
8 years ago |
|
Kaushal Modi
|
eec3303296
|
Update CSP for search and real world examples pages #doc site
|
8 years ago |
|
Kaushal Modi
|
a49c159008
|
Remove unnecessary url from img-src #doc site CSP
|
8 years ago |
|
Kaushal Modi
|
cd3ae6a828
|
Make the CSP effective #doc site
|
8 years ago |
|
Kaushal Modi
|
46b035b855
|
Update CSP #doc site
|
8 years ago |
|
Kaushal Modi
|
23c9e719a2
|
Update doc site theme
Also:
- Update font files to a much lighter subset versions
- Add headers
|
8 years ago |
