12 commits

Author	SHA1	Message	Date
Tom Misilo	4e408cbc42	Fix CSP Always being Enabled unless in debug mode. (#9543)	2021-05-05 10:51:47 -07:00
snipe	c7d752fb65	Added S3 url into CSP	2020-11-12 19:50:01 -08:00
snipe	4ccba5337a	Added https://gravatar address to CSP	2020-10-23 12:09:03 -07:00
snipe	32ad9050cf	Added google maps to CSP	2020-08-25 20:48:53 -07:00
snipe	339bdddc38	Fix for Vue js not loading due to CSP :(	2020-06-25 11:00:33 -07:00
snipe	7ccb41371e	Removed unoptimized images directive ... securityheaders.com is claiming it’s onrecognized, even though I got that directive from their site, so… whatever. ¯\_(ツ)_/¯	2020-06-23 01:09:39 -07:00
snipe	2e60a457bf	Dumb fix for feature-policy being dumb.	2020-06-23 01:07:00 -07:00
snipe	00b051b8c7	Added a few more comments	2020-06-23 00:26:09 -07:00
snipe	05b3a9ad7e	Config variable for HSTS	2020-06-22 23:17:27 -07:00
snipe	4fb880384f	Changed comment	2020-06-22 22:37:14 -07:00
snipe	43042ad841	Consolidated ReferrerPolicy into new SecurityHeaders file	2020-06-22 22:35:59 -07:00
snipe	36c8f7f4f1	Additional security headers	2020-06-22 22:31:01 -07:00