BULL-1171

72340f5f · Jovany Espinoza · 0fe5b3eb · 72340f5f
Commit 72340f5f authored Aug 20, 2021 by Jovany Espinoza
Hide whitespace changes
Inline Side-by-side

Showing with 13 additions and 1 deletion

nginx/nginx-security.conf nginx/nginx-security.conf +13 -1

No files found.
--- a/nginx/nginx-security.conf
+++ b/nginx/nginx-security.conf
 add_header X-Frame-Options "DENY";
-add_header Content-Security-Policy "default-src 'self'; script-src 'self' www.google-analytics.com; style-src 'self' 'nonce-bGF1bmNoYm9hcmQtbm9uY2U=' www.google-analytics.com; img-src 'self'; connect-src 'self' www.google-analytics.com; font-src 'self'; object-src 'self'; media-src 'self'; manifest-src 'self' 'nonce-bGF1bmNoYm9hcmQtbm9uY2U=' *.dso.mil; frame-src 'none'; form-action 'self'; frame-ancestors 'none';" always;
+add_header Content-Security-Policy "
+  default-src 'self';
+  script-src 'self' www.google-analytics.com;
+  style-src 'self' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-P+0uzXC+/KB6EcdbG5lAFQwguDelLIX7v4oquSP0tKg=' 'nonce-bGF1bmNoYm9hcmQtbm9uY2U=' 'sha256-bQtGdzYPR3E8BIgiylHyB8f69AwwTO8Fs21/PmGcTW0=' 'sha256-RfArpP7YVKZK2GwjlAw5YsYwZkO2mOUnJGizYsRuK1o=' www.google-analytics.com;
+  img-src 'self';
+  connect-src 'self' www.google-analytics.com;
+  font-src 'self';
+  object-src 'self';
+  media-src 'self';
+  manifest-src 'self' 'nonce-bGF1bmNoYm9hcmQtbm9uY2U=' *.dso.mil;
+  frame-src 'none';
+  form-action 'self';
+  frame-ancestors 'none';" always;
 add_header X-XSS-Protection "1; mode=block";
 add_header X-Content-Type-Options "nosniff";