05/18 Enhanced codes and functionalities

2026-05-18 11:38:28 -04:00
parent 22fff0660e
commit fc4145a78e
8 changed files with 197 additions and 13 deletions
@@ -52,7 +52,7 @@ server {

    # Content-Security-Policy (HTTP header takes precedence over meta tag)
    add_header Content-Security-Policy
-        "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'none';"
+        "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://api.pwnedpasswords.com; frame-ancestors 'none';"
        always;

    # ── Request hardening ─────────────────────────────────────────────────────