Merge pull request #139 from noesya/csp

Balise HTTP meta pour le Content-Security-Policy

Merge pull request #139 from noesya/csp
cdf5ed50 · Arnaud Levy · GitHub · a4da288c · 6d94d621 · cdf5ed50
Unverified Commit cdf5ed50 authored 1 year ago by Arnaud Levy Committed by GitHub 1 year ago
--- a/layouts/_default/baseof.html
+++ b/layouts/_default/baseof.html
@@ -3,6 +3,7 @@
  <head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
+    {{ partial "head/csp.html" }}
    {{ partial "head/css.html" }}
    {{ partial "head/seo.html" . }}
    {{ partial "head/favicons.html" . }}

--- a/layouts/partials/head/csp.html
+++ b/layouts/partials/head/csp.html
+<meta
+  http-equiv="Content-Security-Policy"
+  content="default-src 'self' https://* {{ if not hugo.IsProduction }}'unsafe-inline'{{ end }}" />
\ No newline at end of file