Removed block-all-mixed-content since modern browsers now upgrade insecure requests where possible

This commit is contained in:
madrilene 2024-06-25 15:02:34 +02:00
parent 9198e77439
commit ff75f1543a

View file

@ -7,7 +7,7 @@ package = "netlify-plugin-cache"
[[headers]]
for = "/*"
[headers.values]
Content-Security-Policy = "upgrade-insecure-requests; block-all-mixed-content;"
Content-Security-Policy = "upgrade-insecure-requests;"
X-Content-Type-Options = "nosniff"
X-Frame-Options = "DENY"
X-XSS-Protection = "1; mode=block"