Removed security headers

beljp · Sep 28, 2021 · 7784fd2 · 7784fd2
1 parent a04649f
commit 7784fd2
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/netlify.toml b/netlify.toml
@@ -19,12 +19,12 @@
   [headers.values]
     Access-Control-Allow-Origin = "*"
     Access-Control-Allow-Headers = "Content-Type"
-    X-XSS-Protection = "1; mode=block"
-    Referrer-Policy = "no-referrer"
-    X-Content-Type-Options = "nosniff"
-    Strict-Transport-Security = "max-age=15780000; includeSubDomains; preload"
-    Feature-Policy = "geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'none'; payment 'none'"
-    Content-Security-Policy = "default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'"
+    # X-XSS-Protection = "1; mode=block"
+    # Referrer-Policy = "no-referrer"
+    # X-Content-Type-Options = "nosniff"
+    # Strict-Transport-Security = "max-age=15780000; includeSubDomains; preload"
+    # Feature-Policy = "geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'none'; payment 'none'"
+    # Content-Security-Policy = "default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'"
 
 
 [[redirects]]