(kafka-site) branch asf-site updated: KAFKA-16794 Move CSP header from _header.htm to .htaccess (#602)

[ch...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

chia7712 pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/kafka-site.git


The following commit(s) were added to refs/heads/asf-site by this push:
     new 8d6014f1 KAFKA-16794 Move CSP header from _header.htm to .htaccess (#602)
8d6014f1 is described below

commit 8d6014f1b4811a0e7d61352b34faedadd85db77c
Author: Ken Huang <10...@users.noreply.github.com>
AuthorDate: Tue May 21 17:47:35 2024 +0900

    KAFKA-16794 Move CSP header from _header.htm to .htaccess (#602)
    
    Reviewers: Kuan-Po (Cooper) Tseng <br...@gmail.com>, Arnout Engelen <ar...@bzzt.net>, PoAn Yang <pa...@apache.org>, Chia-Ping Tsai <ch...@gmail.com>
---
 .htaccess            | 1 +
 includes/_header.htm | 1 -
 2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/.htaccess b/.htaccess
index 49e7cf19..02b52435 100644
--- a/.htaccess
+++ b/.htaccess
@@ -10,3 +10,4 @@ RewriteRule ^/?(\d+)/javadoc - [S=2]
 RewriteRule ^/?(\d+)/images/ - [S=1]
 RewriteCond $2 !=protocol
 RewriteRule ^/?(\d+)/([a-z]+)(\.html)? /$1/documentation#$2 [R=302,L,NE]
+Header set Content-Security-Policy "frame-src https://youtube.com https://www.youtube.com"
diff --git a/includes/_header.htm b/includes/_header.htm
index 8a4bc158..120957eb 100644
--- a/includes/_header.htm
+++ b/includes/_header.htm
@@ -15,7 +15,6 @@
 		<meta property="og:description" content="Apache Kafka: A Distributed Streaming Platform." />
 		<meta property="og:site_name" content="Apache Kafka" />
 		<meta property="og:type" content="website" />
-		<meta http-equiv="Content-Security-Policy" content="frame-src youtube.com www.youtube.com">
 		<link href="/css/fonts.css" rel="stylesheet">
 		<script src="/js/jquery.min.js"></script>
 		<script defer src="/js/fontawesome.js"></script>