remove csp (safety is for the weak)

This commit is contained in:
2023-10-24 19:23:01 -04:00
parent 3a30986356
commit 5b35a89399

View File

@@ -11,7 +11,6 @@ server {
gzip_types text/plain text/javascript text/css; gzip_types text/plain text/javascript text/css;
gunzip on; gunzip on;
add_header Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com *.chesscomfiles.com *.chess.com *.googletagmanager.com cdn.jsdelivr.net www.google-analytics.com ajax.googleapis.com unpkg.com *.unpkg.com;";
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header X-Content-Type-Options 'nosniff'; add_header X-Content-Type-Options 'nosniff';
add_header X-Frame-Options 'SAMEORIGIN'; add_header X-Frame-Options 'SAMEORIGIN';