NoLog.cz/decide.nolog.cz
6
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Merge pull request #114 from rugk/patch-1

Browse source 
Prevent referrer from being send
This commit is contained in:
jelhan 2016-09-03 18:30:20 +02:00 committed by GitHub
commit 4bb85a1381
3 changed files with 6 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
app/index.html
View file

@ -5,6 +5,7 @@
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="description" content="">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="referrer" content="no-referrer">
{{content-for 'head'}}

3
config/environment.js
View file

@ -19,7 +19,8 @@ module.exports = function(environment) {
'connect-src': "'self'",
'img-src': "'self'",
'style-src': "'self'",
'media-src': "'self'"
'media-src': "'self'",
'referrer': "no-referrer"
},
EmberENV: {

6
public/.htaccess
View file

@ -1,5 +1,5 @@
# Content Security Policy-Headers
# you have to enable apache module headers to get them working
#Header set Content-Security-Policy "default-src 'self';"
#Header set X-Content-Security-Policy "default-src 'self';"
#Header set X-Webkit-CSP "default-src 'self';"
#Header set Content-Security-Policy "default-src 'none'; script-src 'self'; font-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; referrer no-referrer;"
#Header set X-Content-Security-Policy "default-src 'none'; script-src 'self'; font-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; referrer no-referrer;"
#Header set X-Webkit-CSP "default-src 'none'; script-src 'self'; font-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; referrer no-referrer;"