update security headers

significa · Sep 27, 2024 · 84bb939 · 84bb939
1 parent 1af8b07
commit 84bb939
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/vercel.json b/vercel.json
@@ -12,11 +12,11 @@
         },
         {
           "key": "Content-Security-Policy",
-          "value": "frame-ancestors https://app.storyblok.com; upgrade-insecure-requests"
+          "value": "script-src * 'unsafe-inline'; script-src-attr 'none'; img-src 'self' *.storyblok.com data:; media-src 'self' *.storyblok.com; object-src *; child-src 'none'; frame-src 'none'; frame-ancestors https://app.storyblok.com; upgrade-insecure-requests"
         },
         {
-          "key": "Content-Security-Policy-Report-Only",
-          "value": "script-src * 'unsafe-inline'; script-src-attr 'none'; img-src 'self' *.storyblok.com; media-src 'self' *.storyblok.com; object-src *; child-src 'none'; frame-ancestors https://app.storyblok.com; report-uri https://exgb4n9a.uriports.com/reports/report; report-to default"
+          "key": "Permissions-Policy",
+          "value": "fullscreen=*, picture-in-picture=*, autoplay=*, accelerometer=(), ambient-light-sensor=(), , battery=(), camera=(), display-capture=(), encrypted-media=(), geolocation=(), gyroscope=(), idle-detection=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), web-share=()"
         },
         {
           "key": "X-Content-Type-Options",