From 1371fab7c8ed305156da834db7ff17f6b9c5f117 Mon Sep 17 00:00:00 2001
From: Kevin J Hoerr <kjhoerr@protonmail.com>
Date: Sun, 24 Dec 2023 08:33:30 +0000
Subject: Add CSP to block scripts and plugins

---
 src/templates/layouts/page.njk | 1 +
 1 file changed, 1 insertion(+)

(limited to 'src/templates/layouts')

diff --git a/src/templates/layouts/page.njk b/src/templates/layouts/page.njk
index adf9e7f..137b41b 100644
--- a/src/templates/layouts/page.njk
+++ b/src/templates/layouts/page.njk
@@ -10,6 +10,7 @@
     <meta name="twitter:title" content="Kevin J Hoerr &lt;kjhoerr&#64;submelon.tech&gt;"/>
     <meta name="twitter:creator" content="Kevin J Hoerr"/>
     <meta name="twitter:card" content="summary"/>
+    <meta http-equiv="Content-Security-Policy" content="script-src 'none';object-src 'none';base-uri 'none';">
     <meta name="generator" content="{{ eleventy.generator }}"> 
     <link rel="stylesheet" href="/styles.css"/>
     <link rel="icon" href="/favicon-32x32.png" type="image/png"/>
-- 
cgit