CSP erweitert um upgrade-insecure-requests und block-all-mixed-content in index.html

This commit is contained in:
Oliver 2026-02-24 12:07:14 +01:00
parent a6533bfb3d
commit a9f93b8537
No known key found for this signature in database
2 changed files with 5 additions and 2 deletions

View file

@ -3,7 +3,7 @@
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; script-src 'none'; frame-src 'none'; object-src 'none';" />
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; script-src 'none'; frame-src 'none'; object-src 'none'; upgrade-insecure-requests; block-all-mixed-content;" />
<meta name="referrer" content="strict-origin-when-cross-origin" />
<meta name="description" content="Vanity on Tour: Vanlife trifft Technik Apps, Tools, Blog & Projekte." />
<title>Vanity on Tour Go</title>