Luca Sironi@lain both header ?
like this ?
add_header Content-Security-Policy “sandbox;”;
add_header Content-Security-Policy “script-src ‘none’;”;
can you please elaborate what is this attack you’re speaking of ?
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.