File tree 1 file changed +16
-0
lines changed
1 file changed +16
-0
lines changed Original file line number Diff line number Diff line change @@ -25,6 +25,22 @@ ingress:
25
25
className : cilium
26
26
annotations :
27
27
kubernetes.io/tls-acme : " true"
28
+ nginx.ingress.kubernetes.io/configuration-snippet : |
29
+ more_set_headers "Content-Security-Policy:
30
+ default-src 'self';
31
+ script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.intercomcdn.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://widget.intercom.io https://s3.tradingview.com;
32
+ style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;
33
+ style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com;
34
+ connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://api.bako.global/socket.io wss://api.bako.global/socket.io https://testnet.fuel.network https://mainnet.fuel.network https://relay.walletconnect.org wss://relay.walletconnect.org https://hermes.pyth.network https://indexer.hyperindex.xyz wss://indexer.hyperindex.xyz https://app.sentio.xyz https://api.web3modal.org wss://relay.walletconnect.com https://api.bako.global https://unleash.v12.trade wss://nexus-websocket-a.intercom.io https://spark-candles.v12.trade wss://api.bako.global/socket.io https://api-js.mixpanel.com;
35
+ img-src 'self' data:;
36
+ font-src 'self' https://fonts.gstatic.com data:;
37
+ frame-src 'self' https://widgetbot.io https://intercom.io https://widget.intercom.io https://verify.walletconnect.com https://e.widgetbot.io https://s.tradingview.com blob:;
38
+ media-src 'self';
39
+ manifest-src 'self';
40
+ worker-src 'self';
41
+ child-src 'self';
42
+ block-all-mixed-content;
43
+ upgrade-insecure-requests;";
28
44
29
45
resources :
30
46
requests :
You can’t perform that action at this time.
0 commit comments