From 835cdee1a2c52be417b8810b62d35b1e8fc0157c Mon Sep 17 00:00:00 2001 From: Tommy Date: Thu, 21 Jul 2022 19:53:33 -0400 Subject: [PATCH] Fix --- netlify.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/netlify.toml b/netlify.toml index 1c5f6b3..9492b18 100644 --- a/netlify.toml +++ b/netlify.toml @@ -2,7 +2,7 @@ for = "/*" [headers.values] Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload" - Content-Security-Policy = "default-src 'none'; connect-src 'self'; img-src 'self'; script-src-elem 'self'; style-src 'self' www.youtube-nocookie.com 'sha256-yr4ynM8yLb/udBw5AwxToDRvEFICAsflRvlEtBuXiwE=' 'sha256-YQmgcK0jsCe8fDEhfo582Xe+OKm/7ByuuVbsB7UftiU=' 'sha256-yr4ynM8yLb/udBw5AwxToDRvEFICAsflRvlEtBuXiwE=' 'sha256-YQmgcK0jsCe8fDEhfo582Xe+OKm/7ByuuVbsB7UftiU='; style-src-elem 'self'; frame-src www.youtube-nocookie.com; form-action 'none'; frame-ancestors 'none'; block-all-mixed-content; base-uri 'none'" + Content-Security-Policy = "default-src 'none'; connect-src 'self'; img-src 'self'; script-src-elem 'self'; style-src www.youtube-nocookie.com 'unsafe-inline'; style-src-elem 'self'; frame-src www.youtube-nocookie.com; form-action 'none'; frame-ancestors 'none'; block-all-mixed-content; base-uri 'none'" X-Content-Type-Options = "nosniff" Referrer-Policy = "no-referrer" Cross-Origin-Opener-Policy = "same-origin"