greggy/landingpage-haus-schleusingen
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'Fix #41: CSP und Security Headers implementieren' (#49) from feature/issue-41-csp-header into main
All checks were successful
Lint / PHP Syntax Check (push) Successful in 33s
Details
Lint / CSS Lint (stylelint) (push) Successful in 1m13s
Details
Lint / HTML Lint (htmlhint) (push) Successful in 1m9s
Details

Browse Source 
Reviewed-on: #49
This commit is contained in:
greggy
2026-05-22 08:34:34 +02:00
parent 9b92136048 2d9f1838b6
commit 344b0d8271
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
public/.htaccess
View File

@@ -1,6 +1,14 @@
# Enable rewrite engine # Enable rewrite engine
RewriteEngine On RewriteEngine On
# Security Headers
<IfModule mod_headers.c>
Header set X-Content-Type-Options "nosniff"
Header set X-Frame-Options "SAMEORIGIN"
Header set Referrer-Policy "strict-origin-when-cross-origin"
Header set Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; frame-src https://www.google.com/ https://www.google.de/; connect-src 'self'"
</IfModule>
# Legacy redirects (301) – must be before the catch-all # Legacy redirects (301) – must be before the catch-all
RewriteRule ^impressum\.html$ /impressum [R=301,L] RewriteRule ^impressum\.html$ /impressum [R=301,L]
RewriteRule ^datenschutz\.html$ /datenschutz [R=301,L] RewriteRule ^datenschutz\.html$ /datenschutz [R=301,L]