Browse Source

fix: remove X-Content-Security-Policy header (#492)

Per https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP :

> (Sometimes you may see mentions of the `X-Content-Security-Policy` header, but that's an older version and you don't need to specify it anymore.)
main
Mark Lee 4 years ago
committed by GitHub
parent
commit
1ad18486ed
No known key found for this signature in database GPG Key ID: 4AEE18F83AFDEB23
  1. 1
      index.html

1
index.html

@ -4,7 +4,6 @@
<meta charset="UTF-8">
<!-- https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP -->
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'">
<meta http-equiv="X-Content-Security-Policy" content="default-src 'self'; script-src 'self'">
<title>Hello World!</title>
</head>
<body>

Loading…
Cancel
Save