svn commit: r1926636 - /poi/site/publish/.htaccess

[fa...@apache.org]

Author: fanningpj
Date: Sun Jun 22 10:15:09 2025
New Revision: 1926636

URL: http://svn.apache.org/viewvc?rev=1926636&view=rev
Log:
change CSP header

Modified:
    poi/site/publish/.htaccess

Modified: poi/site/publish/.htaccess
URL: http://svn.apache.org/viewvc/poi/site/publish/.htaccess?rev=1926636&r1=1926635&r2=1926636&view=diff
==============================================================================
--- poi/site/publish/.htaccess (original)
+++ poi/site/publish/.htaccess Sun Jun 22 10:15:09 2025
@@ -25,8 +25,9 @@ RewriteRule ^apidocs/(overview*)$ /apido
 
 # Security Headers
 Header set Strict-Transport-Security "max-age=31536000"
-Header set Content-Security-Policy "frame-src 'self' ;"
-# Header set Content-Security-Policy "default-src 'self' https://poi.apache.org/ ; style-src 'self' https://poi.apache.org/ 'unsafe-inline' ; script-src 'self' https://poi.apache.org/ 'unsafe-inline' ; frame-src 'self' ;"
+# long term CSP header but not detailed enough
+# Header set Content-Security-Policy "frame-src 'self' ;"
+Header set Content-Security-Policy "default-src 'self' https://poi.apache.org/ ; style-src 'self' https://poi.apache.org/ 'unsafe-inline' ; script-src 'self' https://poi.apache.org/ 'unsafe-inline' ; frame-src 'self' ;"
 Header always set X-Frame-Options SAMEORIGIN
 Header set X-Content-Type-Options nosniff
 Header set X-XSS-Protection "1; mode=block"



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@poi.apache.org
For additional commands, e-mail: commits-help@poi.apache.org