wyl/hertzbeat
1
0
Fork 0
mirror of https://github.com/dromara/hertzbeat.git synced 2026-09-17 09:40:58 +00:00
Code Issues Projects Releases Wiki Activity

Fix htaccess (#3980)

Browse Source 
Signed-off-by: Logic <zqr10159@dromara.org>
This commit is contained in:
Logic
2026-01-16 22:16:15 +08:00
committed by GitHub
parent 43332f49db
commit afd89e4309
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
home/static/.htaccess
+9 -1
View File
@@ -1,3 +1,11 @@
<IfModule mod_headers.c>
Header set Content-Security-Policy "default-src data: blob: 'self' *.apache.org *.kapa.ai *.githubusercontent.com *.googleapis.com *.google.com *.run.app *.gstatic.com *.github.com https://hcaptcha.com https://*.hcaptcha.com *.algolia.net *.algolianet.com *.apachecon.com *.communityovercode.org 'unsafe-inline' 'unsafe-eval'; frame-src *; frame-ancestors 'self' *.google.com; worker-src 'self' data: blob:; img-src 'self' blob: data: https:; font-src 'self' data: blob:; object-src 'none'"
Header set Content-Security-Policy "default-src 'self' data: blob: *.apache.org *.kapa.ai *.githubusercontent.com *.googleapis.com *.google.com *.run.app *.gstatic.com *.github.com https://hcaptcha.com https://*.hcaptcha.com *.algolia.net *.algolianet.com *.apachecon.com *.communityovercode.org 'unsafe-inline' 'unsafe-eval'; \
script-src 'self' 'unsafe-inline' 'unsafe-eval' widget.kapa.ai www.google.com https://hcaptcha.com https://*.hcaptcha.com https://www.gstatic.com; \
connect-src 'self' proxy.kapa.ai kapa-widget-proxy-la7dkmplpq-uc.a.run.app metrics.kapa.ai *.algolia.net *.algolianet.com https://hcaptcha.com https://*.hcaptcha.com www.google.com; \
frame-src 'self' * www.google.com https://hcaptcha.com https://*.hcaptcha.com; \
frame-ancestors 'self' *.google.com; \
worker-src 'self' data: blob:; \
img-src 'self' blob: data: https:; \
font-src 'self' data: blob:; \
object-src 'none'"
</IfModule>