Disable Content-Security-Policy for now.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
This commit is contained in:
Matt Moyer 2021-04-09 10:57:54 -05:00
parent e5314164c5
commit 63816aa3ba
No known key found for this signature in database
GPG Key ID: EAE88AD172C5AE2D

View File

@ -37,7 +37,8 @@ HUGO_ENABLEGITINFO = "true"
[[headers]]
for = "/*"
[headers.values]
Content-Security-Policy = "default-src 'self'; img-src *"
# disabled to support docsearch until https://github.com/algolia/instantsearch.js/issues/2868 is fixed.
# Content-Security-Policy = "default-src 'self'; img-src *"
X-Content-Type-Options = "nosniff"
X-Frame-Options = "DENY"
X-XSS-Protection = "1; mode=block"