diff --git a/content/blog/security.md b/content/blog/security.md index a6e84a5..efac83c 100644 --- a/content/blog/security.md +++ b/content/blog/security.md @@ -1,6 +1,7 @@ +++ title = "Secure by default" date = 2023-02-22 +updated = 2023-03-13 description = "tabi has an easily customizable Content Security Policy (CSP) with safe defaults. Get peace of mind and an A+ on Mozilla Observatory." [taxonomies] @@ -9,7 +10,7 @@ tags = ["security", "showcase"] The default configuration of the theme gets an A+ score on [Mozilla Observatory](https://observatory.mozilla.org). -This is accomplished by programatically configuring Content Security Policy (CSP) headers based on a user-defined list of allowed domains in the theme's `config.toml` file. Here's the default and recommended setup (you could remove the last lines if you don't want to embed videos): +This is accomplished by programatically configuring Content Security Policy (CSP) headers based on a user-defined list of allowed domains in the theme's `config.toml` file. Here's the default and recommended setup (you could remove the last directive if you don't want to embed videos): ``` [extra]