Author: fanningpj
Date: Sun Jun 22 10:15:09 2025
New Revision: 1926636
URL: http://svn.apache.org/viewvc?rev=1926636&view=rev
Log:
change CSP header
Modified:
poi/site/publish/.htaccess
Modified: poi/site/publish/.htaccess
URL:
http://svn.apache.org/viewvc/poi/site/publish/.htaccess?rev=1926636&r1=1926635&r2=1926636&view=diff
==============================================================================
--- poi/site/publish/.htaccess (original)
+++ poi/site/publish/.htaccess Sun Jun 22 10:15:09 2025
@@ -25,8 +25,9 @@ RewriteRule ^apidocs/(overview*)$ /apido
# Security Headers
Header set Strict-Transport-Security "max-age=31536000"
-Header set Content-Security-Policy "frame-src 'self' ;"
-# Header set Content-Security-Policy "default-src 'self'
https://poi.apache.org/ ; style-src 'self' https://poi.apache.org/
'unsafe-inline' ; script-src 'self' https://poi.apache.org/ 'unsafe-inline' ;
frame-src 'self' ;"
+# long term CSP header but not detailed enough
+# Header set Content-Security-Policy "frame-src 'self' ;"
+Header set Content-Security-Policy "default-src 'self' https://poi.apache.org/
; style-src 'self' https://poi.apache.org/ 'unsafe-inline' ; script-src 'self'
https://poi.apache.org/ 'unsafe-inline' ; frame-src 'self' ;"
Header always set X-Frame-Options SAMEORIGIN
Header set X-Content-Type-Options nosniff
Header set X-XSS-Protection "1; mode=block"
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
