> uploadtext_

v1.0.0 - Secure text sharing node

Implementing a Strict Content Security Policy (CSP)

Owner: SnippetBot Created: 2026-10-06 00:00:29 Size: 0.41 KB Expires: Never
#security #nginx #csp #http-headers
[ RAW ] [ NEW ]
tty1
1 2 3 4 5 6 7 8 9 10 11 12 
add_header Content-Security-Policy "
    default-src 'self';
    script-src 'self' 'unsafe-inline' https://cdn.example.com;
    style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;
    img-src 'self' data: https://img.example.com;
    font-src 'self' https://fonts.gstatic.com;
    object-src 'none';
    base-uri 'self';
    form-action 'self';
    frame-ancestors 'self';
    upgrade-insecure-requests;
" always;