criptixo-me/_headers at main · criptixo/criptixo-me · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
# Security Headers
/*
  X-Frame-Options: DENY
  X-Content-Type-Options: nosniff
  X-XSS-Protection: 1; mode=block
  Referrer-Policy: strict-origin-when-cross-origin
  Permissions-Policy: geolocation=(), microphone=(), camera=()
  Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://www5.cbox.ws https://ws.audioscrobbler.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; frame-src https://www5.cbox.ws; connect-src 'self' https://ws.audioscrobbler.com; object-src 'none'; base-uri 'self'; form-action 'self'

# Cache Control
/*.html
  Cache-Control: public, max-age=3600

/*.css
  Cache-Control: public, max-age=31536000

/*.js
  Cache-Control: public, max-age=31536000

/*.png
  Cache-Control: public, max-age=31536000

/*.jpg
  Cache-Control: public, max-age=31536000

/*.gif
  Cache-Control: public, max-age=31536000

/robots.txt
  Cache-Control: public, max-age=86400

/sitemap.xml
  Cache-Control: public, max-age=86400

# Preload Critical Resources
/
  Link: </style.css>; rel=preload; as=style
  Link: </lastfm-widget.js>; rel=preload; as=script

/blog/
  Link: </style.css>; rel=preload; as=style
  Link: </blog/blog-filter.js>; rel=preload; as=script

/gallery/
  Link: </style.css>; rel=preload; as=style
  Link: </gallery/gallery-filter.js>; rel=preload; as=script