mirror of
https://github.com/strapi/strapi.git
synced 2026-01-06 12:13:52 +00:00
63 lines
988 B
JSON
63 lines
988 B
JSON
{
|
|
"csrf": {
|
|
"enabled": false,
|
|
"key": "_csrf",
|
|
"secret": "_csrfSecret"
|
|
},
|
|
"csp": {
|
|
"enabled": true,
|
|
"policy": [{
|
|
"img-src": "'self' http:"
|
|
},
|
|
"block-all-mixed-content"
|
|
]
|
|
},
|
|
"p3p": {
|
|
"enabled": true,
|
|
"value": ""
|
|
},
|
|
"hsts": {
|
|
"enabled": true,
|
|
"maxAge": 31536000,
|
|
"includeSubDomains": true
|
|
},
|
|
"xframe": {
|
|
"enabled": true,
|
|
"value": "SAMEORIGIN"
|
|
},
|
|
"xss": {
|
|
"enabled": true,
|
|
"mode": "block"
|
|
},
|
|
"cors": {
|
|
"enabled": true,
|
|
"origin": "*",
|
|
"expose": [
|
|
"WWW-Authenticate",
|
|
"Server-Authorization"
|
|
],
|
|
"maxAge": 31536000,
|
|
"credentials": true,
|
|
"methods": [
|
|
"GET",
|
|
"POST",
|
|
"PUT",
|
|
"PATCH",
|
|
"DELETE",
|
|
"OPTIONS",
|
|
"HEAD"
|
|
],
|
|
"headers": [
|
|
"Content-Type",
|
|
"Authorization",
|
|
"X-Frame-Options",
|
|
"Origin"
|
|
]
|
|
},
|
|
"ip": {
|
|
"enabled": false,
|
|
"whiteList": [],
|
|
"blackList": []
|
|
}
|
|
}
|