From eee40d968ffaf24c4bb7acc60cb748e9fce2de92 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= Date: Tue, 17 Mar 2026 11:31:01 +0000 Subject: [PATCH] csp for favicon --- hosts/fwminex/configuration.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/hosts/fwminex/configuration.nix b/hosts/fwminex/configuration.nix index 49d18cb..45e211d 100644 --- a/hosts/fwminex/configuration.nix +++ b/hosts/fwminex/configuration.nix @@ -366,7 +366,7 @@ in "m.jakstys.lt".extraConfig = '' header { Strict-Transport-Security "max-age=15768000" - Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'" + Content-Security-Policy "default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'" X-Content-Type-Options "nosniff" X-Frame-Options "DENY" Alt-Svc "h3=\":443\"; ma=86400" @@ -447,7 +447,7 @@ in header { Strict-Transport-Security "max-age=15768000" - Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'" + Content-Security-Policy "default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'" X-Content-Type-Options "nosniff" X-Frame-Options "DENY" Alt-Svc "h3=\":443\"; ma=86400"