Take a stab at Content Security Policy in meta tags

This commit is contained in:
Robbie Antenesse 2018-01-07 16:03:14 -07:00
parent ca471da663
commit e68e877119
1 changed files with 15 additions and 0 deletions

View File

@ -9,6 +9,21 @@
<meta property="og:title" content="Lexiconga Dictionary Builder">
<meta property="og:description" content="Build lexicons for contructed languages or anything that you can think of!">
<meta property="og:image" content="http://lexicon.ga/images/logo.svg">
<meta property="Content-Security-Policy"
content="default-src 'self';
base-uri 'self';
sandbox 'self';
script-src 'self';
child-src 'none';
object-src 'none';
plugin-types 'none';
connect-src 'none';
font-src *;
img-src *;
media-src *;
style-src 'self';
worker-src 'self';
form-action 'none'">
</head>
<body>
<div id="site"></div>