We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent aa296ff commit e2ff07cCopy full SHA for e2ff07c
nginx.conf
@@ -38,6 +38,7 @@ http {
38
root /usr/share/nginx/html;
39
index index.html index.htm;
40
41
+ add_header Access-Control-Allow-Origin "https://api.ipa.ucdavis.edu" always;
42
add_header Cache-Control "no-cache";
43
add_header Content-Security-Policy "default-src 'self'; connect-src https://api.ipa.ucdavis.edu https://dw.dss.ucdavis.edu; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.youtube.com;";
44
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
0 commit comments