diff --git a/config.toml b/config.toml index 57c67fd..a7b4b65 100644 --- a/config.toml +++ b/config.toml @@ -33,7 +33,6 @@ favicon = "" # This header image is used for SEO. For example if you were to share an image via Messenger/Instagram/Twitter a preview picture is also presented headerImage = "" -# The icon is display besides the menu text but is not necessary. It needs to be placed under "menu_icon" in the static "folder" menu = [ { name = "blog", url = "$BASE_URL/blog" }, { name = "archive", url = "$BASE_URL/archive" }, @@ -41,7 +40,7 @@ menu = [ { name = "projects", url = "$BASE_URL/projects" }, ] -#The icons available can be found in "social_icons" in the "static" folder +# The icons available can be found in "social_icons" in the "static" folder socials = [ { name = "atom feed", url = "$BASE_URL/atom.xml", icon = "rss" }, { name = "github", url = "https://github.com/welpo/", icon = "github" }, @@ -56,7 +55,7 @@ socials = [ # Useful if you want to load remote content safely (embed YouTube videos, which needs frame-src, for example). # Default directive is self. # Default config, allows for https remote images and embedding YouTube and Vimeo content. -# This configuration gets an A+ in Mozilla's Observatory: https://observatory.mozilla.org +# This configuration (along with the right webserver settings) gets an A+ in Mozilla's Observatory: https://observatory.mozilla.org allowed_domains = [ { directive = "img-src", domains = ["'self'", "https://*"] }, { directive = "script-src", domains = ["'self'"] }, diff --git a/content/blog/security.md b/content/blog/security.md index 1649de4..90f70c8 100644 --- a/content/blog/security.md +++ b/content/blog/security.md @@ -1,7 +1,7 @@ +++ title = "Secure by default" date = 2023-02-22 -updated = 2023-03-13 +updated = 2023-04-14 description = "tabi has an easily customizable Content Security Policy (CSP) with safe defaults. Get peace of mind and an A+ on Mozilla Observatory." [taxonomies]