Update security headers and contact form

2025-12-31 15:34:22 +00:00
parent 493e7fe38a
commit 6bb1ec7b38
2 changed files with 18 additions and 25 deletions
@@ -5,7 +5,7 @@
 [headers]
  for = "/*"
  [headers.values]
-    Content-Security-Policy = "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'"
+    Content-Security-Policy = "default-src 'self'; script-src 'self'; style-src 'self'; frame-ancestors 'none';"
    X-Frame-Options = "DENY"
    Strict-Transport-Security = "max-age=31536000"
-    Referrer-Policy = "strict-origin"
+    Referrer-Policy = "strict-origin-when-cross-origin"