Author: fanningpj
Date: Sat Feb 17 18:54:43 2024
New Revision: 1915845
URL: http://svn.apache.org/viewvc?rev=1915845&view=rev
Log:
try to set security headers
Modified:
poi/site/publish/.htaccess
Modified: poi/site/publish/.htaccess
URL:
http://svn.apache.org/viewvc/poi/site/publish/.htaccess?rev=1915845&r1=1915844&r2=1915845&view=diff
==============================================================================
--- poi/site/publish/.htaccess (original)
+++ poi/site/publish/.htaccess Sat Feb 17 18:54:43 2024
@@ -27,7 +27,7 @@ RewriteRule ^apidocs/(overview*)$ /apido
# Security Headers
Header set Strict-Transport-Security "max-age=31536000"
-Header set Content-Security-Policy "default-src 'self' https://poi.apache.org/
; frame-src 'self' ;"
+Header set Content-Security-Policy "default-src 'self' https://poi.apache.org/
; style-src 'self' https://poi.apache.org/ 'unsafe-inline' ; script-src 'self'
https://poi.apache.org/ 'unsafe-inline' ; frame-src 'self' ;"
Header always set X-Frame-Options SAMEORIGIN
Header set X-Content-Type-Options nosniff
Header set X-XSS-Protection "1; mode=block"
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@poi.apache.org
For additional commands, e-mail: commits-h...@poi.apache.org
