Removed from Google's FLoC Network
Ylian Saint-Hilaire committed
Apr 15, 2021 at 21:28 UTC
0f73af9534c27a3a6e2452393743d276d2297a60
1 file changed
+3
-2
webserver.js
+3
-2
@@ -5302,8 +5302,9 @@ module.exports.CreateWebServer = function (parent, db, args, certificates) {
5302
const headers = {
5303
'Referrer-Policy': 'no-referrer',
5304
'X-XSS-Protection': '1; mode=block',
5305
- 'X-Content-Type-Options': 'nosniff'
5306
- //'Content-Security-Policy': "default-src 'none'; font-src 'self'; script-src 'self' 'unsafe-inline'" + extraScriptSrc + "; connect-src 'self'" + geourl + selfurl + "; img-src 'self'" + geourl + " data:; style-src 'self' 'unsafe-inline'; frame-src 'self' https://*.youtube.com mcrouter:; media-src 'self'; form-action 'self'"
5305
+ 'X-Content-Type-Options': 'nosniff',
5306
+ 'Permissions-Policy': 'interest-cohort=()', // Remove Google's FLoC Network
5307
+ 'Content-Security-Policy': "default-src 'none'; font-src 'self'; script-src 'self' 'unsafe-inline'" + extraScriptSrc + "; connect-src 'self'" + geourl + selfurl + "; img-src 'self'" + geourl + " data:; style-src 'self' 'unsafe-inline'; frame-src 'self' mcrouter:; media-src 'self'; form-action 'self'"
5308
};
5309
if ((parent.config.settings.allowframing !== true) && (typeof parent.config.settings.allowframing !== 'string')) { headers['X-Frame-Options'] = 'sameorigin'; }
5310
res.set(headers);