help/netlify.toml at main · hellotext/help · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
[build]
  command = "JEKYLL_ENV=production bundle exec jekyll build && ruby script/verify_security_headers.rb"
  publish = "_site"

[build.environment]
  RUBY_VERSION = "3.3.6"
  BUNDLE_VERSION = "2.4.22"
  NODE_VERSION = "18"

[context.production]
  command = "JEKYLL_ENV=production bundle exec jekyll build && ruby script/verify_security_headers.rb"

[[headers]]
  for = "/*"

  [headers.values]
    Content-Security-Policy = "default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'sha256-KOs83E8sWN0ZSanqdvyKqXPbanqGOxQAEZPz+lkrVh4=' 'sha256-Cn9RZi6b09IrtHxo4SOhpbbX/E5ZK+VAFUrpZMFjghg=' 'sha256-wCYJmMu4lFJ6xS8zGIftK+/iSWhmPjnRowWepgy5lUQ=' 'sha256-AlC35S17jo/t3ripYSesMGbb0n4TCpeu1H+vT7O2UnM=' 'strict-dynamic' https://www.googletagmanager.com https://static.hotjar.com https://script.hotjar.com; style-src 'self' 'unsafe-inline' https://static.hotjar.com https://script.hotjar.com; img-src 'self' https://*.google-analytics.com https://www.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://google.com https://www.google.com.uy https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://static.hotjar.com https://script.hotjar.com https://survey-images.hotjar.com; font-src 'self' https://script.hotjar.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://google.com https://www.google.com.uy https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; frame-src https://www.googletagmanager.com https://insights.hotjar.com; frame-ancestors 'none'; form-action 'self'; upgrade-insecure-requests"