added content-security-policy meta header

4 years ago · 99b9e58156
parent c3600b610d
commit 99b9e58156
1 changed files with 1 additions and 0 deletions
--- a/includes/_meta.php
+++ b/includes/_meta.php
@ -1,3 +1,4 @@
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'sha256-oPJXuak1pElErSvVwH0Ur/Eg+JCYn0MrJUzQ0kBQmno='; img-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self' data:;">
    <meta charset="utf-8" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />