feat: Restore grid search, auth, and CSP

This commit is contained in:
Richard Standow 2026-02-27 09:55:28 +00:00
parent 9b1923af56
commit 647b0d4513
51 changed files with 449 additions and 52 deletions

View file

@ -6,7 +6,7 @@ server {
location / {
root /usr/share/nginx/html;
index index.html;
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src data: 'self'";
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src data: 'self' https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; connect-src 'self' https: blob:; worker-src 'self' blob:;";
add_header X-XSS-Protection "1; mode=block";
add_header X-Frame-Options "DENY";
add_header X-Content-Type-Options nosniff;