Removed block-all-mixed-content since modern browsers now upgrade insecure requests where possible
This commit is contained in:
parent
9198e77439
commit
ff75f1543a
1 changed files with 1 additions and 1 deletions
|
|
@ -7,7 +7,7 @@ package = "netlify-plugin-cache"
|
||||||
[[headers]]
|
[[headers]]
|
||||||
for = "/*"
|
for = "/*"
|
||||||
[headers.values]
|
[headers.values]
|
||||||
Content-Security-Policy = "upgrade-insecure-requests; block-all-mixed-content;"
|
Content-Security-Policy = "upgrade-insecure-requests;"
|
||||||
X-Content-Type-Options = "nosniff"
|
X-Content-Type-Options = "nosniff"
|
||||||
X-Frame-Options = "DENY"
|
X-Frame-Options = "DENY"
|
||||||
X-XSS-Protection = "1; mode=block"
|
X-XSS-Protection = "1; mode=block"
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue