diff --git a/netlify.toml b/netlify.toml index 7dcd8f3..d06f47c 100644 --- a/netlify.toml +++ b/netlify.toml @@ -14,7 +14,7 @@ Content-Security-Policy = "default-src 'none'; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https: wss:; media-src 'self' blob: https:; frame-src 'self' https:; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests" X-Frame-Options = "DENY" X-Content-Type-Options = "nosniff" - Referrer-Policy = "no-referrer" + Referrer-Policy = "strict-origin-when-cross-origin" Permissions-Policy = "geolocation=(self), camera=(self), microphone=()" [[headers]]