Skip to content

Instantly share code, notes, and snippets.

@digitalhuman

digitalhuman/nginx_csp_header.txt

Last active March 23, 2020 15:04
Show Gist options
  • Save digitalhuman/2ed0b7b7c0f032ec47ca462b5e468260 to your computer and use it in GitHub Desktop.
Save digitalhuman/2ed0b7b7c0f032ec47ca462b5e468260 to your computer and use it in GitHub Desktop.
Download ZIP
nginx CSP header
Raw
nginx_csp_header.txt
add_header Content-Security-Policy "default-src 'self' data: https: https://*.anticapitalist.party https://*.github.com; form-action 'self'; child-src 'self'; script-src 'self' 'unsafe-eval' https://maxcdn.bootstrapcdn.com https://code.jquery.com; connect-src 'self' https: wss:; img-src 'self' data:; style-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://fonts.googleapis.com https://code.jquery.com https://maxcdn.bootstrapcdn.com; font-src 'self' https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://fonts.googleapis.com; object-src 'none';"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment