change security headers

This commit is contained in:
Michi 2025-04-05 22:33:57 +02:00
parent 6149ef44e8
commit 46bae0fa7d
2 changed files with 3 additions and 4 deletions

View file

@ -15,7 +15,6 @@
<link rel="canonical" href="{{ .Site.BaseURL }}"> <link rel="canonical" href="{{ .Site.BaseURL }}">
<script src='{{ "/akar-icons-fonts/src/index.js" | relURL }}' async></script> <script src='{{ "/akar-icons-fonts/src/index.js" | relURL }}' async></script>
<script src='{{ "/main.js" | absURL }}' defer></script> <script src='{{ "/main.js" | absURL }}' defer></script>
<link rel="preload" href='{{ "/style.css" | absURL }}' as="style" />
<link rel="stylesheet" type="text/css" href='{{ "/style.css" | absURL }}' media="screen"/> <link rel="stylesheet" type="text/css" href='{{ "/style.css" | absURL }}' media="screen"/>
<meta name="description" content="{{ .Site.Params.description }}"> <meta name="description" content="{{ .Site.Params.description }}">
<meta name="keywords" content='{{ delimit site.Params.keywords ", " }}'> <meta name="keywords" content='{{ delimit site.Params.keywords ", " }}'>

View file

@ -6,7 +6,7 @@
X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff
X-Frame-Options: DENY X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block
Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Embedder-Policy: unsafe-none
Cross-Origin-Opener-Policy: same-origin Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Origin: https://michivonah.ch Access-Control-Allow-Origin: https://michivonah.ch