diff options
author | Achilleas Pipinellis <axil@gitlab.com> | 2020-10-08 09:35:09 +0300 |
---|---|---|
committer | dcouture <dcouture@gitlab.com> | 2020-10-22 17:06:33 +0300 |
commit | f494d1179980f1c116929f7e1c7196a99b4fcc9e (patch) | |
tree | 0fb5e6e52168fff6abd439fe9a2c231abc29ecd8 /layouts/head.html | |
parent | c9c969789347f37ded5a9c14bbc794820ca455d1 (diff) |
Add CSP headers
Diffstat (limited to 'layouts/head.html')
-rw-r--r-- | layouts/head.html | 13 |
1 files changed, 8 insertions, 5 deletions
diff --git a/layouts/head.html b/layouts/head.html index 71871884..bffb09fa 100644 --- a/layouts/head.html +++ b/layouts/head.html @@ -20,6 +20,13 @@ <% else %> <meta name="docsearch:version" content="master" /> <% end %> + +<!-- Enable CSP headers --> +<% unless ENV['DISABLE_CSP'] %> +<%= render '/csp.*' %> +<% end %> +<!-- End of CSP headers --> + <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css" integrity="sha384-JcKb8q3iqJ61gNV9KGb8thSsNjpSL0n8PARn9HuZOnIxN0hoP+VmmDGMN5t9UJ0Z" crossorigin="anonymous"> <link rel="stylesheet" href="<%= @items['/assets/stylesheets/stylesheet.*'].path %>"> <link rel="stylesheet" href="<%= @items['/assets/stylesheets/highlight.*'].path %>"> @@ -38,11 +45,7 @@ <script id="Cookiebot" src="https://consent.cookiebot.com/uc.js" data-cbid="36a06ac5-ddb4-4f91-8337-067ad19ad8d5" type="text/javascript"></script> <!-- Google Tag Manager --> - <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': - new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], - j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= - 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); - })(window,document,'script','dataLayer','GTM-WZCXKT5');</script> + <script src="<%= @items['/assets/javascripts/google_tagmanager.*'].path %>"></script> <!-- End Google Tag Manager --> <!-- Google webmasters verification --> |