security: add csp

6 years ago · 0ed07b8a7b
1 changed files with 3 additions and 0 deletions
--- a/index.html
+++ b/index.html
@ -2,6 +2,9 @@
 <html>
  <head>
    <meta charset="UTF-8">
+    <!-- https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP -->
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'">
+    <meta http-equiv="X-Content-Security-Policy" content="default-src 'self'; script-src 'self'">
    <title>Hello World!</title>
  </head>
  <body>