From 5b57cf4afc37c5a8fc180ce81b7fae7da8cf4d5d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tao=20Bojl=C3=A9n?=
 <2803708-tao_oat@users.noreply.gitlab.com>
Date: Mon, 18 May 2020 18:30:40 +0100
Subject: [PATCH] add security headers to netlify frontend

---
 netlify.toml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/netlify.toml b/netlify.toml
index 5b70f41..f7dee33 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -16,3 +16,11 @@
   to = "/index.html"
   status = 200
 
+[[headers]]
+  for = "/*"
+  [headers.values]
+  X-Content-Type-Options = "nosniff"
+  X-Frame-Options = "DENY"
+  X-XSS-Protection = "1"
+  Content-Security-Policy = "default-src 'self' https://*.fediverse.space"
+