From: Markus Baumann Date: Mon, 29 May 2017 12:48:37 +0000 (+0200) Subject: BKKVBU-1694 Update csp headers for zone35 form X-Git-Tag: v0.1.0~2888^2~1^2~1 X-Git-Url: https://git.uhu-banane.org/?a=commitdiff_plain;h=ec7adc1f255e4d851a15b37cf9de4384e040107a;p=pixelpark%2Fhiera.git BKKVBU-1694 Update csp headers for zone35 form --- diff --git a/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml b/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml index 1c698584..c3314d8b 100644 --- a/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml +++ b/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml @@ -44,8 +44,8 @@ infra::profile::apache::pp_vhosts: - 'set X-Content-Type-Options: nosniff' - 'set X-XSS-Protection: "1; mode=block"' - 'set X-Frame-Options: "ALLOW-FROM https://dev-cms01-meine-krankenkasse-de.pixelpark.net"' - - "set Content-Security-Policy: \"default-src 'self' bkk-vorteilsrechner.de; img-src 'self' webstats.pixelpark.com data:; font-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' webstats.pixelpark.com; child-src 'self'; frame-ancestors 'self'\"" - - "set X-Content-Security-Policy: \"default-src 'self' bkk-vorteilsrechner.de; img-src 'self' webstats.pixelpark.com data:; font-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' webstats.pixelpark.com; child-src 'self'; frame-ancestors 'self'\"" + - "set Content-Security-Policy: \"default-src 'self'; img-src 'self' webstats.pixelpark.com bkk-vorteilsrechner.de data:; font-src 'self' bkk-vorteilsrechner.de; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' webstats.pixelpark.com bkk-vorteilsrechner.de; child-src 'self' bkk-vorteilsrechner.de; frame-ancestors 'self'\"" + - "set X-Content-Security-Policy: \"default-src 'self' bkk-vorteilsrechner.de; img-src 'self' webstats.pixelpark.com bkk-vorteilsrechner.de data:; font-src 'self' bkk-vorteilsrechner.de; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' webstats.pixelpark.com bkk-vorteilsrechner.de; child-src 'self' bkk-vorteilsrechner.de; frame-ancestors 'self'\"" headers_ssl: - 'always set Strict-Transport-Security "max-age=31556926"' custom_fragment: |