diff options
| -rw-r--r-- | .htaccess | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/.htaccess b/.htaccess index 4f2a6f35af4..7e8fd902294 100644 --- a/.htaccess +++ b/.htaccess @@ -14,6 +14,10 @@ Header set X-Robots-Tag "none" Header set X-Frame-Options "SAMEORIGIN" SetEnv modHeadersAvailable true + + # Add CSP header if not set, used for static resources + Header append Content-Security-Policy "" + Header edit Content-Security-Policy "^$" "default-src 'none'; style-src 'self' 'unsafe-inline'; script-src 'self'" </IfModule> # Add cache control for CSS and JS files |