mirror of
https://github.com/strapi/strapi.git
synced 2026-01-04 11:16:32 +00:00
a22f2cefef
- set security defaults for development mode that are standard - refactor error messages to work without ctx.request.admin - remove mask middleware and add a sanitization layer to the core-api to hide private fileds
37 lines
528 B
JSON
37 lines
528 B
JSON
{
|
|
"csp": {
|
|
"enabled": true,
|
|
"policy": [
|
|
{
|
|
"img-src": "'self' http:"
|
|
},
|
|
"block-all-mixed-content"
|
|
]
|
|
},
|
|
"p3p": {
|
|
"enabled": true,
|
|
"value": ""
|
|
},
|
|
"hsts": {
|
|
"enabled": true,
|
|
"maxAge": 31536000,
|
|
"includeSubDomains": true
|
|
},
|
|
"xframe": {
|
|
"enabled": true,
|
|
"value": "SAMEORIGIN"
|
|
},
|
|
"xss": {
|
|
"enabled": true,
|
|
"mode": "block"
|
|
},
|
|
"cors": {
|
|
"enabled": true
|
|
},
|
|
"ip": {
|
|
"enabled": false,
|
|
"whiteList": [],
|
|
"blackList": []
|
|
}
|
|
}
|