From 46bae0fa7db66915f22dc4c51b756952decc9f89 Mon Sep 17 00:00:00 2001
From: michivonah <info@michivonah.ch>
Date: Sat, 5 Apr 2025 22:33:57 +0200
Subject: [PATCH] change security headers

---
 layouts/partials/header.html | 1 -
 static/_headers              | 6 +++---
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/layouts/partials/header.html b/layouts/partials/header.html
index c05c09e..e15b509 100644
--- a/layouts/partials/header.html
+++ b/layouts/partials/header.html
@@ -15,7 +15,6 @@
     <link rel="canonical" href="{{ .Site.BaseURL }}">
     <script src='{{ "/akar-icons-fonts/src/index.js" | relURL }}' async></script>
     <script src='{{ "/main.js" | absURL }}' defer></script>
-    <link rel="preload" href='{{ "/style.css" | absURL }}' as="style" />
     <link rel="stylesheet" type="text/css" href='{{ "/style.css" | absURL }}' media="screen"/>
     <meta name="description" content="{{ .Site.Params.description }}">
     <meta name="keywords" content='{{ delimit site.Params.keywords ", " }}'>
diff --git a/static/_headers b/static/_headers
index 6d40f68..9e29908 100644
--- a/static/_headers
+++ b/static/_headers
@@ -6,7 +6,7 @@
   X-Content-Type-Options: nosniff
   X-Frame-Options: DENY
   X-XSS-Protection: 1; mode=block
-  Cross-Origin-Embedder-Policy: require-corp
-  Cross-Origin-Opener-Policy: same-origin
-  Cross-Origin-Resource-Policy: same-origin
+  Cross-Origin-Embedder-Policy: unsafe-none
+  Cross-Origin-Opener-Policy: same-origin-allow-popups
+  Cross-Origin-Resource-Policy: cross-origin
   Access-Control-Allow-Origin: https://michivonah.ch
\ No newline at end of file