-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path_headers
More file actions
62 lines (48 loc) · 7.29 KB
/
Copy path_headers
File metadata and controls
62 lines (48 loc) · 7.29 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
/*
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Permissions-Policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
Cross-Origin-Resource-Policy: same-origin
X-Permitted-Cross-Domain-Policies: none
/
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://cdn.jsdelivr.net https://fonts.googleapis.com https://fonts.gstatic.com https://waterservices.usgs.gov https://air-quality-api.open-meteo.com https://api.open-meteo.com https://cloudflareinsights.com https://api.weather.gov https://api.water.noaa.gov ; frame-src 'self' https://embed.windy.com https://www.facebook.com https://my.matterport.com https://john2121-quantumrabbithole-explorer.static.hf.space; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://static.cloudflareinsights.com https://cdn.jsdelivr.net; upgrade-insecure-requests; block-all-mixed-content
/index.html
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://cdn.jsdelivr.net https://fonts.googleapis.com https://fonts.gstatic.com https://waterservices.usgs.gov https://air-quality-api.open-meteo.com https://api.open-meteo.com https://cloudflareinsights.com https://api.weather.gov https://api.water.noaa.gov ; frame-src 'self' https://embed.windy.com https://www.facebook.com https://my.matterport.com https://john2121-quantumrabbithole-explorer.static.hf.space; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://static.cloudflareinsights.com https://cdn.jsdelivr.net; upgrade-insecure-requests; block-all-mixed-content
/about.html
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://cdn.jsdelivr.net https://fonts.googleapis.com https://fonts.gstatic.com https://waterservices.usgs.gov https://air-quality-api.open-meteo.com https://api.open-meteo.com https://cloudflareinsights.com https://api.weather.gov https://api.water.noaa.gov ; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://static.cloudflareinsights.com https://cdn.jsdelivr.net; upgrade-insecure-requests; block-all-mixed-content
/contact.html
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self' https://cdn.jsdelivr.net https://waterservices.usgs.gov https://air-quality-api.open-meteo.com https://api.open-meteo.com https://cloudflareinsights.com ; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://static.cloudflareinsights.com https://cdn.jsdelivr.net; upgrade-insecure-requests; block-all-mixed-content
/video-section.html
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data:; media-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self' https://cdn.jsdelivr.net https://waterservices.usgs.gov https://air-quality-api.open-meteo.com https://api.open-meteo.com https://cloudflareinsights.com ; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://static.cloudflareinsights.com https://cdn.jsdelivr.net; upgrade-insecure-requests; block-all-mixed-content
/calc/
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self' https://cdn.jsdelivr.net https://waterservices.usgs.gov https://air-quality-api.open-meteo.com https://api.open-meteo.com https://cloudflareinsights.com ; manifest-src 'self'; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://static.cloudflareinsights.com https://cdn.jsdelivr.net; upgrade-insecure-requests; block-all-mixed-content
/calc/index.html
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self' https://cdn.jsdelivr.net https://waterservices.usgs.gov https://air-quality-api.open-meteo.com https://api.open-meteo.com https://cloudflareinsights.com ; manifest-src 'self'; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://static.cloudflareinsights.com https://cdn.jsdelivr.net; upgrade-insecure-requests; block-all-mixed-content
/calc/service-worker.js
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
/calc/service-worker-assets.js
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
/calc/manifest.webmanifest
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Content-Type: application/manifest+json
/calc/_framework/*
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
/calc/css/*
Cache-Control: public, max-age=31536000, immutable
X-Content-Type-Options: nosniff
/fortress.html
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; frame-src https://john2121-dondlingergc-digital-fortress-builder.static.hf.space; upgrade-insecure-requests
/chat.html
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; frame-src https://john2121-dgcchat.static.hf.space; upgrade-insecure-requests
/store.html
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data: https://via.placeholder.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://cloudflareinsights.com; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; upgrade-insecure-requests