Freddie Leeman 710e7aa940
Feature-/Permissions-Policy HTTP header update (#15667)
Removed features that were removed from the 'Feature-Policy' spec (vibrate, speaker). List of valid features can be found here: https://github.com/w3c/webappsec-permissions-policy/blob/master/features.md

Due to a recent rename of the policy I've copied the Feature-Policy to a Permissions-Policy header and changed the value syntax. For backwards compatibility I recommend leaving the 'Feature-Policy' for now.

Syntax errors found using: https://www.uriports.com/score/home-assistant.io
2020-11-17 16:25:03 +01:00

21 lines
942 B
Plaintext

/*
Cache-Control: public, max-age: 0, s-maxage=3600, must-revalidate
Content-Security-Policy: form-action https:
Feature-Policy: geolocation 'none'; midi 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; payment 'none'
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=()
Referrer-Policy: no-referrer-when-downgrade
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
/*.css
Cache-Control: public, max-age: 604800, s-maxage=604800
/*.js
Cache-Control: public, max-age: 604800, s-maxage=604800
/assets/*
Cache-Control: public, max-age: 0, s-maxage=604800, must-revalidate
/fonts/*
Cache-Control: public, max-age: 1800, s-maxage=604800, must-revalidate
/images/*
Cache-Control: public, max-age: 1800, s-maxage=604800, must-revalidate
/static/*
Cache-Control: public, max-age: 1800, s-maxage=604800, must-revalidate