diff options
author | Jacques Erasmus <jerasmus@gitlab.com> | 2020-10-23 15:40:08 +0300 |
---|---|---|
committer | Jacques Erasmus <jerasmus@gitlab.com> | 2020-10-23 15:40:08 +0300 |
commit | ea37f4856ea7af2c5f888b3bea3a5487589d49a9 (patch) | |
tree | 2d6ad8c4d99e7e29f0f9e1b926a0fcabd631f72d /layouts/csp.html | |
parent | fdd1fc948cd47c6b130e78e00b6b9e8f4e1b39eb (diff) |
Revert "Merge branch 'csp-headers' into 'master'"
This reverts merge request !1217
Diffstat (limited to 'layouts/csp.html')
-rw-r--r-- | layouts/csp.html | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/layouts/csp.html b/layouts/csp.html deleted file mode 100644 index 38fa6aff..00000000 --- a/layouts/csp.html +++ /dev/null @@ -1 +0,0 @@ -<meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-eval' https://assets.gitlab-static.net/assets/snowplow/ https://cdn.bizible.com/scripts/bizible.js https://cdn.jsdelivr.net/npm/clipboard@2/dist/clipboard.min.js https://cdn.jsdelivr.net/npm/docsearch.js@2/dist/cdn/docsearch.min.js https://cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.min.js https://cdnjs.cloudflare.com/ajax/libs/popper.js/ cdnjs.cloudflare.com/ajax/libs/mermaid/ connect.facebook.net/en_US/fbevents.js https://consent.cookiebot.com https://consentcdn.cookiebot.com https://googleads.g.doubleclick.net/pagead/viewthroughconversion/923339191/ https://munchkin.marketo.net/munchkin.js https://script.hotjar.com/ https://snap.licdn.com/li.lms-analytics/insight.min.js https://stackpath.bootstrapcdn.com/bootstrap/ https://static.hotjar.com/c/ https://www.google-analytics.com/analytics.js https://www.googleadservices.com/pagead/conversion_async.js https://www.googletagmanager.com/gtm.js https://cdn.jsdelivr.net/npm/jquery@3.5.1/ https://*.algolia.net https://*.algolianet.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://stackpath.bootstrapcdn.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://*.algolia.net https://*.algolianet.com https://*.mktoresp.com https://snowplow.trx.gitlab.net https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.com; font-src 'self' https://cdnjs.cloudflare.com https://fonts.gstatic.com; frame-src 'self' https://bid.g.doubleclick.net https://consentcdn.cookiebot.com https://vars.hotjar.com; img-src 'self' https: data:; manifest-src 'self'; media-src 'self'; worker-src 'none';"> |