Implement CSP

hellotham · Sep 15, 2023 · 0544f7f · 0544f7f
1 parent 6b58bff
commit 0544f7f
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -199,3 +199,4 @@ All commands are run from the root of the project, from a terminal:
   - Fixed minor astro check error
 - 3.2.0: Major enhancement:
   - Updated to Astro 3.x
+  - Implement permissive Content Security Policy
diff --git a/src/layouts/base.astro b/src/layouts/base.astro
@@ -17,6 +17,8 @@ const { frontmatter } = Astro.props
 <html lang="en">
   <head>
     <meta charset="UTF-8" />
+    <meta http-equiv="Content-Security-Policy" content="default-src * 'unsafe-eval' 'unsafe-inline'; object-src 'none'">
+    <meta http-equiv="Referrer-Policy" content="no-referrer, strict-origin-when-cross-origin">
     <meta name="viewport" content="width=device-width" />
     <link rel="icon" href={`${Astro.site}favicon.ico`} sizes="any" />
     <link rel="icon" href={`${Astro.site}favicon.svg`} type="image/svg+xml" />