blob: 3f079520c1f2e62236d07b8cf0148aa90400de7d (
plain)
1
2
3
4
5
6
7
8
|
<IfModule mod_headers.c>
<Files "index.html">
Header set X-Content-Type-Options "nosniff"
Header set Referrer-Policy "strict-origin-when-cross-origin"
Header set Permissions-Policy "geolocation=(), microphone=(), camera=(), payment=(), usb=()"
Header set Content-Security-Policy "default-src 'self'; base-uri 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://sirocco.accuweather.com; form-action 'self' https://www.google.com https://www.google.ca; object-src 'none'"
</Files>
</IfModule>
|
