|
4 | 4 | X-XSS-Protection: 1; mode=block |
5 | 5 | Referrer-Policy: no-referrer |
6 | 6 | Link: </css/index.min.css>; rel=preload; as=style; referrerpolicy=no-referrrer; |
7 | | - Link: <//cdn.kernvalley.us/js/shims.min.js>; rel=preload; as=script; referrerpolicy=no-referrrer; crossorigin=anonymous; |
8 | | - Link: <//cdn.kernvalley.us/js/std-js/harden.js>; rel=preload; as=script; referrerpolicy=no-referrrer; crossorigin=anonymous; |
| 7 | + Link: <https://unpkg.com/@shgysk8zer0/polyfills@0.0.5/all.min.js>; rel=preload; as=script; referrerpolicy=no-referrrer; crossorigin=anonymous; |
| 8 | + Link: <https://unpkg.com/@shgysk8zer0/kazoo@0.0.5/harden.js>; rel=preload; as=script; referrerpolicy=no-referrrer; crossorigin=anonymous; |
9 | 9 | Link: </js/index.min.js>; rel=preload; as=script; referrerpolicy=no-referrrer; |
10 | | - Content-Security-Policy: default-src 'self'; img-src *; script-src 'self' cdn.kernvalley.us unpkg.com/ www.google-analytics.com www.googletagmanager.com cdn.polyfill.io/v3/polyfill.min.js www.gstatic.com/firebasejs/; style-src 'self' cdn.kernvalley.us unpkg.com/; connect-src 'self' cdn.kernvalley.us store.kernvalley.us apps.kernvalley.us ads.kernvalley.us/api/ api.github.com/users/ api.openweathermap.org/data/2.5/weather www.google-analytics.com/ www.googletagmanager.com/gtag/ firestore.googleapis.com; font-src cdn.kernvalley.us; media-src *; frame-src www.youtube-nocookie.com; form-action 'self'; manifest-src 'self'; worker-src 'self'; reflected-xss block; upgrade-insecure-requests; block-all-mixed-content; disown-opener; trusted-types default empty#html empty#script sanitizer-raw#html purify-raw#html purify#html weather-current#html youtube#embed pwa-install share-to-buttons#html github-user#html ga#script-url goog#html; require-trusted-types-for 'script'; |
| 10 | + Content-Security-Policy: default-src 'self'; img-src *; script-src 'self' cdn.kernvalley.us unpkg.com/ www.google-analytics.com www.googletagmanager.com cdn.polyfill.io/v3/polyfill.min.js www.gstatic.com/firebasejs/ 'nonce-c23ddb4e-a8ec-44f0-ad77-d1ac60938c7e'; style-src 'self' cdn.kernvalley.us unpkg.com/; connect-src 'self' cdn.kernvalley.us store.kernvalley.us apps.kernvalley.us ads.kernvalley.us/api/ api.github.com/users/ api.openweathermap.org/data/2.5/weather www.google-analytics.com/ www.googletagmanager.com/gtag/ firestore.googleapis.com; font-src cdn.kernvalley.us; media-src *; frame-src www.youtube-nocookie.com; form-action 'self'; manifest-src 'self'; worker-src 'self'; reflected-xss block; upgrade-insecure-requests; block-all-mixed-content; disown-opener; trusted-types default empty#html empty#script sanitizer-raw#html purify-raw#html purify#html weather-current#html youtube#embed pwa-install share-to-buttons#html github-user#html ga#script-url goog#html; require-trusted-types-for 'script'; |
11 | 11 |
|
12 | 12 | /:placeholder/ |
13 | 13 | X-Content-Type-Options: nosniff |
|
16 | 16 | Referrer-Policy: no-referrer |
17 | 17 | Feature-Policy: geolocation 'self'; |
18 | 18 | Link: </css/index.min.css>; rel=preload; as=style; referrerpolicy=no-referrrer; |
19 | | - Link: <//cdn.kernvalley.us/js/shims.min.js>; rel=preload; as=script; referrerpolicy=no-referrrer; crossorigin=anonymous; |
| 19 | + Link: <https://unpkg.com/@shgysk8zer0/polyfills@0.0.5/all.min.js>; rel=preload; as=script; referrerpolicy=no-referrrer; crossorigin=anonymous; |
20 | 20 | Link: <//cdn.kernvalley.us/js/std-js/harden.js>; rel=preload; as=script; referrerpolicy=no-referrrer; crossorigin=anonymous; |
21 | 21 | Link: </js/index.min.js>; rel=preload; as=script; referrerpolicy=no-referrrer; |
22 | | - Content-Security-Policy: default-src 'self'; img-src * data: blob:; script-src 'self' cdn.kernvalley.us unpkg.com/ www.google-analytics.com www.googletagmanager.com cdn.polyfill.io/v3/polyfill.min.js js.stripe.com/v3/ www.gstatic.com/firebasejs/; style-src 'self' cdn.kernvalley.us unpkg.com/; connect-src 'self' cdn.kernvalley.us store.kernvalley.us apps.kernvalley.us ads.kernvalley.us/api/ api.github.com/users/ api.openweathermap.org/data/2.5/weather www.google-analytics.com/ www.googletagmanager.com/gtag/ firestore.googleapis.com; font-src cdn.kernvalley.us; media-src *; frame-src www.youtube-nocookie.com maps.kernvalley.us/embed js.stripe.com/v3/; form-action 'self'; manifest-src 'self'; worker-src 'self'; reflected-xss block; upgrade-insecure-requests; block-all-mixed-content; disown-opener; trusted-types default empty#html empty#script sanitizer-raw#html purify-raw#html purify#html weather-current#html youtube#embed github-user#html pwa-install share-to-buttons#html ga#script-url goog#html; require-trusted-types-for 'script'; |
| 22 | + Content-Security-Policy: default-src 'self'; img-src * data: blob:; script-src 'self' cdn.kernvalley.us unpkg.com/ www.google-analytics.com www.googletagmanager.com cdn.polyfill.io/v3/polyfill.min.js js.stripe.com/v3/ www.gstatic.com/firebasejs/ 'nonce-c23ddb4e-a8ec-44f0-ad77-d1ac60938c7e'; style-src 'self' cdn.kernvalley.us unpkg.com/; connect-src 'self' cdn.kernvalley.us store.kernvalley.us apps.kernvalley.us ads.kernvalley.us/api/ api.github.com/users/ api.openweathermap.org/data/2.5/weather www.google-analytics.com/ www.googletagmanager.com/gtag/ firestore.googleapis.com; font-src cdn.kernvalley.us; media-src *; frame-src www.youtube-nocookie.com maps.kernvalley.us/embed js.stripe.com/v3/; form-action 'self'; manifest-src 'self'; worker-src 'self'; reflected-xss block; upgrade-insecure-requests; block-all-mixed-content; disown-opener; trusted-types default empty#html empty#script sanitizer-raw#html purify-raw#html purify#html weather-current#html youtube#embed github-user#html pwa-install share-to-buttons#html ga#script-url goog#html; require-trusted-types-for 'script'; |
23 | 23 |
|
24 | 24 | /reset |
25 | 25 | Referrer-Policy: no-referrer |
|
29 | 29 | /embed/ |
30 | 30 | Referrer-Policy: no-referrer |
31 | 31 | X-Frame-Options: ALLOW |
32 | | - Content-Security-Policy: default-src 'none'; img-src 'self' *; style-src 'self' cdn.kernvalley.us/components/wfd/events.css; script-src 'self' cdn.kernvalley.us/js/ cdn.kernvalley.us/components/wfd/events.min.js; font-src cdn.kernvalley.us/fonts/; connect-src 'self' whiskeyflatdays.com/events.json cdn.kernvalley.us/components/wfd/events.html; Cross-Origin-Embedder-Policy: unsafe-none; frame-ancestors *; upgrade-insecure-requests; block-all-mixed-content; disown-opener; trusted-types empty#html empty#script sanitizer-raw#html wfd-events#html; require-trusted-types-for 'script'; |
33 | | - Link: <//cdn.kernvalley.us/js/shims.min.js> rel=preload; as=script; crossorigin=anonymous; referrerpolicy=no-referrer; |
| 32 | + Content-Security-Policy: default-src 'none'; img-src 'self' *; style-src 'self' cdn.kernvalley.us/components/wfd/events.css; script-src 'self' cdn.kernvalley.us/js/ cdn.kernvalley.us/components/wfd/events.min.js 'nonce-c23ddb4e-a8ec-44f0-ad77-d1ac60938c7e'; font-src cdn.kernvalley.us/fonts/; connect-src 'self' whiskeyflatdays.com/events.json cdn.kernvalley.us/components/wfd/events.html; Cross-Origin-Embedder-Policy: unsafe-none; frame-ancestors *; upgrade-insecure-requests; block-all-mixed-content; disown-opener; trusted-types empty#html empty#script sanitizer-raw#html wfd-events#html; require-trusted-types-for 'script'; |
| 33 | + Link: <https://unpkg.com/@shgysk8zer0/polyfills@0.0.5/all.min.js> rel=preload; as=script; crossorigin=anonymous; referrerpolicy=no-referrer; |
34 | 34 | Link: <//cdn.kernvalley.us/js/std-js/harden.js> rel=preload; as=script; crossorigin=anonymous; referrerpolicy=no-referrer; |
35 | 35 | Link: <//cdn.kernvalley.us/components/wfd/events.html>; rel=preload; as=fetch; type=text/html; crossorigin=anonymous; referrerpolicy=no-referrer; |
36 | 36 | Link: <//cdn.kernvalley.us/components/wfd/events.html>; rel=preload; as=style; type=text/css; crossorigin=anonymous; referrerpolicy=no-referrer; |
|
0 commit comments