Removed block-all-mixed-content since modern browsers now upgrade insecure requests where possible
This commit is contained in:
parent
9198e77439
commit
ff75f1543a
1 changed files with 1 additions and 1 deletions
|
|
@ -7,7 +7,7 @@ package = "netlify-plugin-cache"
|
|||
[[headers]]
|
||||
for = "/*"
|
||||
[headers.values]
|
||||
Content-Security-Policy = "upgrade-insecure-requests; block-all-mixed-content;"
|
||||
Content-Security-Policy = "upgrade-insecure-requests;"
|
||||
X-Content-Type-Options = "nosniff"
|
||||
X-Frame-Options = "DENY"
|
||||
X-XSS-Protection = "1; mode=block"
|
||||
|
|
|
|||
Loading…
Reference in a new issue