From 29ff09ac950d40dd525e1b438ab2ecaf0a4be96f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?L=C3=A9o=20Colombaro?= Date: Fri, 15 Mar 2019 18:58:47 +0100 Subject: [PATCH 1/2] Remove CSP from basic.conf includes Too strong for general purposes. Closes #222 --- h5bp/basic.conf | 1 - 1 file changed, 1 deletion(-) diff --git a/h5bp/basic.conf b/h5bp/basic.conf index f63b4a7..477a6db 100644 --- a/h5bp/basic.conf +++ b/h5bp/basic.conf @@ -2,7 +2,6 @@ # https://github.com/h5bp/server-configs-nginx include h5bp/internet_explorer/x-ua-compatible.conf; -include h5bp/security/content-security-policy.conf; include h5bp/security/referrer-policy.conf; include h5bp/security/x-content-type-options.conf; include h5bp/security/x-frame-options.conf; From 00373398ef777f822c6cccf71542eb6d6db0a326 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?L=C3=A9o=20Colombaro?= Date: Fri, 15 Mar 2019 19:01:48 +0100 Subject: [PATCH 2/2] Keep testing CSP headers --- test/vhosts/server.localhost.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/test/vhosts/server.localhost.conf b/test/vhosts/server.localhost.conf index fdbb837..b345333 100644 --- a/test/vhosts/server.localhost.conf +++ b/test/vhosts/server.localhost.conf @@ -19,6 +19,7 @@ server { gzip_min_length 1; + include h5bp/security/content-security-policy.conf; include h5bp/location/web_performance_filename-based_cache_busting.conf; include h5bp/location/web_performance_svgz-compression.conf; include h5bp/errors/custom_errors.conf;