From 4d18be3a83557b6268f6d8b7de9f69c34ceacd27 Mon Sep 17 00:00:00 2001 From: welpo Date: Fri, 14 Apr 2023 23:50:26 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=93=9D=20fix:=20clarify=20requirements=20?= =?UTF-8?q?for=20A+=20Observatory=20score?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- config.toml | 5 ++--- content/blog/security.md | 2 +- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/config.toml b/config.toml index 57c67fd..a7b4b65 100644 --- a/config.toml +++ b/config.toml @@ -33,7 +33,6 @@ favicon = "" # This header image is used for SEO. For example if you were to share an image via Messenger/Instagram/Twitter a preview picture is also presented headerImage = "" -# The icon is display besides the menu text but is not necessary. It needs to be placed under "menu_icon" in the static "folder" menu = [ { name = "blog", url = "$BASE_URL/blog" }, { name = "archive", url = "$BASE_URL/archive" }, @@ -41,7 +40,7 @@ menu = [ { name = "projects", url = "$BASE_URL/projects" }, ] -#The icons available can be found in "social_icons" in the "static" folder +# The icons available can be found in "social_icons" in the "static" folder socials = [ { name = "atom feed", url = "$BASE_URL/atom.xml", icon = "rss" }, { name = "github", url = "https://github.com/welpo/", icon = "github" }, @@ -56,7 +55,7 @@ socials = [ # Useful if you want to load remote content safely (embed YouTube videos, which needs frame-src, for example). # Default directive is self. # Default config, allows for https remote images and embedding YouTube and Vimeo content. -# This configuration gets an A+ in Mozilla's Observatory: https://observatory.mozilla.org +# This configuration (along with the right webserver settings) gets an A+ in Mozilla's Observatory: https://observatory.mozilla.org allowed_domains = [ { directive = "img-src", domains = ["'self'", "https://*"] }, { directive = "script-src", domains = ["'self'"] }, diff --git a/content/blog/security.md b/content/blog/security.md index 1649de4..90f70c8 100644 --- a/content/blog/security.md +++ b/content/blog/security.md @@ -1,7 +1,7 @@ +++ title = "Secure by default" date = 2023-02-22 -updated = 2023-03-13 +updated = 2023-04-14 description = "tabi has an easily customizable Content Security Policy (CSP) with safe defaults. Get peace of mind and an A+ on Mozilla Observatory." [taxonomies]