[+] Added security headers

This commit is contained in:
Seven 2025-01-06 17:55:18 +08:00
parent 4e03562460
commit 4a5c18cc73
Signed by: realSunyz
SSH Key Fingerprint: SHA256:5dk3slVnWtJYlwrnURrUYXoimuSx8Vi9pbs4n3XoGH0
2 changed files with 11 additions and 1 deletions

6
.gitignore vendored
View File

@ -1,9 +1,13 @@
# Hugo # Hugo
public public/*
resources resources
assets/jsconfig.json assets/jsconfig.json
.hugo_build.lock .hugo_build.lock
# Headers
!public
!public/_headers
# VSCode # VSCode
.vscode/* .vscode/*
!.vscode/settings.json !.vscode/settings.json

6
public/_headers Normal file
View File

@ -0,0 +1,6 @@
https://blog.sunyz.dev/*
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Permissions-Policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()