diff --git a/public/_headers b/public/_headers index 736b36e..66e33ef 100644 --- a/public/_headers +++ b/public/_headers @@ -1,65 +1,65 @@ -https://:project.pages.dev/* - X-Robots-Tag: noindex, follow +https://yuki.youronly.one/* + X-Robots-Tag: all -https://youronly.one/* - X-Robots-Tag: all, index, follow +https://love.youronly.one/* + X-Robots-Tag: all -https://confidentraveler.youronly.one/* - X-Robots-Tag: all, index, follow +https://snoworld.youronly.one/* + X-Robots-Tag: all -https://faithfulathlete.youronly.one/* - X-Robots-Tag: all, index, follow +https://techmagus.youronly.one/* + X-Robots-Tag: all -https://iam.youronly.one/* - X-Robots-Tag: all, index, follow +https://way.youronly.one/* + X-Robots-Tag: all -https://images.youronly.one/* - X-Robots-Tag: all, index, follow +https://semweb.youronly.one/* + X-Robots-Tag: all -https://im.youronly.one/* - X-Robots-Tag: all, index, follow +https://p.youronly.one/* + X-Robots-Tag: all -https://love.youronly.one/* - X-Robots-Tag: all, index, follow +https://iam.youronly.one/* + X-Robots-Tag: all -https://p.youronly.one/* - X-Robots-Tag: all, index, follow +https://confidentraveler.youronly.one/* + X-Robots-Tag: all -https://rsc.youronly.one/* - X-Robots-Tag: all, index, follow +https://faithfulathlete.youronly.one/* + X-Robots-Tag: all -https://semweb.youronly.one/* - X-Robots-Tag: all, index, follow +https://yugenbard.youronly.one/* + X-Robots-Tag: all -https://snoworld.youronly.one/* - X-Robots-Tag: all, index, follow +https://images.youronly.one/* + X-Robots-Tag: all -https://techmagus.youronly.one/* - X-Robots-Tag: all, index, follow +https://rsc.youronly.one/* + X-Robots-Tag: all -https://way.youronly.one/* - X-Robots-Tag: all, index, follow +https://im.youronly.one/* + X-Robots-Tag: all -https://yelosan.youronly.one/* - X-Robots-Tag: all, index, follow +https://youronly.one/* + X-Robots-Tag: all -https://yugenbard.youronly.one/* - X-Robots-Tag: all, index, follow +https://yelosan.youronly.one/* + X-Robots-Tag: all -https://yuki.youronly.one/* - X-Robots-Tag: all, index, follow +https://:project.pages.dev/* + X-Robots-Tag: noindex /* - Strict-Transport-Security: max-age=63072000; includeSubDomains; preload - Link: ; rel="me openid.delegate", ; rel="me openid.delegate", ; rel="me openid.delegate", ; rel="publisher me", ; rel="indieauth-metadata authorization_endpoint", ; rel="webmention", ; rel="openid.server", ; rel="hub", ; rel="hub", ; rel="hub", ; rel="hub", ; rel="pgpkey", ; rel="project" + Strict-Transport-Security: max-age=63072000;includeSubDomains;preload + Link: ;rel="me openid.delegate",;rel="me openid.delegate",;rel="me openid.delegate",;rel="publisher me",;rel="indieauth-metadata authorization_endpoint",;rel="webmention",;rel="openid.server",;rel="hub",;rel="hub",;rel="hub",;rel="hub",;rel="pgpkey",;rel="project" X-Pingback: https://webmention.io/im.youronly.one/xmlrpc # X-DNS-Prefetch-Control: off X-Content-Type-Options: nosniff X-Frame-Options: DENY - Referrer-Policy: no-referrer, strict-origin-when-cross-origin + Referrer-Policy: no-referrer,strict-origin-when-cross-origin Access-Control-Allow-Origin: * - # Content-Encoding: gzip, deflate - Vary: Upgrade-Insecure-Requests, Origin, Accept-Encoding + # Content-Encoding: gzip,deflate + Vary: Upgrade-Insecure-Requests,Origin,Accept-Encoding ############################################################################## ### Cross-Origin-Opener-Policy ### @@ -73,8 +73,8 @@ https://yuki.youronly.one/* ### - unsafe-none ### ### - default ### ############################################################################## - #Cross-Origin-Opener-Policy: same-origin-allow-popups-plus-coep; report-to="default" - Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="default" + #Cross-Origin-Opener-Policy: same-origin-allow-popups-plus-coep;report-to="default" + Cross-Origin-Opener-Policy: same-origin-allow-popups;report-to="default" ############################################################################## ### Cross-Origin-Resource-Policy ### @@ -102,14 +102,17 @@ https://yuki.youronly.one/* ### - default ### ### - some third-party resources not yet CORP/CORS enabled ### ############################################################################## - #Cross-Origin-Embedder-Policy: credentialless; report-to="default" - Cross-Origin-Embedder-Policy: unsafe-none; report-to="default" + #Cross-Origin-Embedder-Policy: credentialless;report-to="default" + Cross-Origin-Embedder-Policy: unsafe-none;report-to="default" ### CSP moved to Cloudflare worker. _headers file has a 1000-character restriction per line. ### - Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(self), display-capture=(self), document-domain=(), encrypted-media=*, execution-while-not-rendered=(), execution-while-out-of-viewport=*, fullscreen=(self), geolocation=(), gyroscope=(), keyboard-map=(self), magnetometer=(), microphone=(), midi=(), navigation-override=(self), payment=(), picture-in-picture=*, publickey-credentials-get=(self), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(self), xr-spatial-tracking=(self), clipboard-read=(self), clipboard-write=(self), gamepad=(self), speaker-selection=(self), conversion-measurement=(self), focus-without-user-activation=(self), hid=(self), idle-detection=(self), serial=(self), trust-token-redemption=(self), browsing-topics=() + + Permissions-Policy: accelerometer=(),ambient-light-sensor=(),attribution-reporting=*,autoplay=(),battery=(),bluetooth=(),camera=(),compute-pressure=(),clipboard-read=(self),clipboard-write=(self),conversion-measurement=(self),cross-origin-isolated=(self),display-capture=(self),document-domain=(),encrypted-media=*,execution-while-not-rendered=*,execution-while-out-of-viewport=*,focus-without-user-activation=(self),fullscreen=(self),gamepad=(self),geolocation=(),gyroscope=(),hid=(self),identity-credentials-get=*,idle-detection=(),keyboard-map=(self),local-fonts=(self),magnetometer=(),microphone=(self),midi=(self),navigation-override=(self),otp-credentials=(),payment=(),picture-in-picture=*,publickey-credentials-create=(self),publickey-credentials-get=(self),screen-wake-lock=(self),serial=(self),speaker-selection=(self),storage-access=(),sync-xhr=(self),trust-token-redemption=(self),usb=(self),web-share=(self),window-management=(self),window-placement=(self),vertical-scroll=(self),xr-spatial-tracking=(self) + Report-To: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://yelosan.report-uri.com/a/d/g"}],"include_subdomains":true} + NEL: {"report_to":"default","max_age":31536000,"include_subdomains":true} #X-Powered-By: Hugo ### YourOnly.One: We do not use cookies. Only here for reference ### - # Set-Cookie: __Host-sess=123; path=/; Secure; HttpOnly; SameSite + # Set-Cookie: __Host-sess=123;path=/;Secure;HttpOnly;SameSite