fix: update headers

TradeTrust · Jun 21, 2024 · 1df4b35 · 1df4b35
1 parent e0945ec
commit 1df4b35
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/netlify.toml b/netlify.toml
@@ -29,4 +29,5 @@
   for = "/*"
   [headers.values]
     X-Content-Type-Options = "nosniff"
-    X-XSS-Protection = "1; mode=block"
+    Strict-Transport-Security = "max-age=31536000; includeSubDomains"
+    Content-Security-Policy = "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; frame-ancestors 'self'; form-action 'self'"