39 lines
881 B
JSON
39 lines
881 B
JSON
{
|
|
"headers": [
|
|
{
|
|
"source": "/api/(.*)",
|
|
"headers": [
|
|
{
|
|
"key": "Access-Control-Allow-Methods",
|
|
"value": "GET, POST, OPTIONS"
|
|
},
|
|
{
|
|
"key": "Access-Control-Allow-Headers",
|
|
"value": "Content-Type, Accept"
|
|
},
|
|
{
|
|
"key": "Strict-Transport-Security",
|
|
"value": "max-age=63072000; includeSubDomains; preload"
|
|
},
|
|
{
|
|
"key": "Content-Security-Policy",
|
|
"value": "default-src 'none'"
|
|
},
|
|
{
|
|
"key": "X-Content-Type-Options",
|
|
"value": "nosniff"
|
|
},
|
|
{
|
|
"key": "X-Frame-Options",
|
|
"value": "DENY"
|
|
},
|
|
{ "key": "Referrer-Policy", "value": "same-origin" },
|
|
{
|
|
"key": "X-XSS-Protection",
|
|
"value": "1; mode=block"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|