Skip to content

Instantly share code, notes, and snippets.

@nawawi
Last active December 9, 2020 16:46
Show Gist options
  • Save nawawi/347cf411799ea6677df972ec5f62c843 to your computer and use it in GitHub Desktop.
Save nawawi/347cf411799ea6677df972ec5f62c843 to your computer and use it in GitHub Desktop.
# apache
Header set Referrer-Policy strict-origin-when-cross-origin
Header set Content-Security-Policy 'report-uri /csp-report-parser;'
Header set Feature-Policy "payment 'self'; sync-xhr 'self' https://iszuddinismail.com"
Header set Permissions-Policy "payment=(self),sync-xhr=(self 'https://iszuddinismail.com')"
# nginx
# rc letak dalam etc/nginx-rc/extra.d/[APPNAME].headers.0.conf
add_header Content-Security-Policy "report-uri /csp-report-parser";
add_header Referrer-Policy "strict-origin-when-cross-origin";
add_header Permissions-Policy "payment=(self), sync-xhr=(self 'https://iszuddinismail.com')";
add_header Feature-Policy "payment 'self'; sync-xhr 'self' https://iszuddinismail.com";
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment