Fix htaccess, remove (blocked) favicons

Tiliavir · Aug 15, 2022 · 3543d85 · 3543d85
1 parent f77b2a1
commit 3543d85
Show file tree

Hide file tree

Showing 4 changed files with 3 additions and 18 deletions.
diff --git a/assets/ts/vereine-und-links.js b/assets/ts/vereine-und-links.js
diff --git a/assets/ts/vereine-und-links.ts b/assets/ts/vereine-und-links.ts
diff --git a/content/vereine-und-links.md b/content/vereine-und-links.md
@@ -3,8 +3,6 @@ title: Vereine und Links
 description: Vereine und Verbände mit denen der Musikverein in langjähriger freundschaftlicher Verbindung steht und eine gute Zusammenarbeit pflegt.
 keywords: [Befreundete Vereine, Befreundete Verbände, Vereine, Partnerschaften, Freundschaften, Verbindungen]
 menu: main
-customJs:
-  - ts/vereine-und-links.ts
 ---
 
 ## Befreundete Vereine

diff --git a/static/.htaccess b/static/.htaccess
@@ -67,9 +67,9 @@ AddType 'image/svg+xml; charset=UTF8' svg svgz
 
   Header set Referrer-Policy "no-referrer"
 
-  Header set Content-Security-Policy "default-src 'self' https://www.mv-wollbach.de; script-src 'self' 'unsafe-inline' www.google.com www.gstatic.com cdn.ampproject.org; object-src 'none'; style-src 'self'; img-src 'self' www.google.com; font-src 'self'; connect-src 'self'"
-  Header set X-Content-Security-Policy "default-src 'self' https://www.mv-wollbach.de; script-src 'self' 'unsafe-inline' www.google.com www.gstatic.com cdn.ampproject.org; object-src 'none'; style-src 'self'; img-src 'self' www.google.com; font-src 'self'; connect-src 'self'"
-  Header set X-WebKit-CSP "default-src 'self' https://www.mv-wollbach.de; script-src 'self' 'unsafe-inline' www.google.com www.gstatic.com cdn.ampproject.org; object-src 'none'; style-src 'self'; img-src 'self' www.google.com; font-src 'self'; connect-src 'self'"
+  Header set Content-Security-Policy "default-src 'self' https://www.mv-wollbach.de; script-src 'self' 'unsafe-inline' cdn.ampproject.org; object-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' lh3.googleusercontent.com; media-src youtube-nocookie.com; frame-src www.youtube-nocookie.com; font-src 'self'; connect-src 'self'"
+  Header set X-Content-Security-Policy "default-src 'self' https://www.mv-wollbach.de; script-src 'self' 'unsafe-inline' cdn.ampproject.org; object-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' lh3.googleusercontent.com; media-src youtube-nocookie.com; frame-src www.youtube-nocookie.com; font-src 'self'; connect-src 'self'"
+  Header set X-WebKit-CSP "default-src 'self' https://www.mv-wollbach.de; script-src 'self' 'unsafe-inline' cdn.ampproject.org; object-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' lh3.googleusercontent.com; media-src youtube-nocookie.com; frame-src www.youtube-nocookie.com; font-src 'self'; connect-src 'self'"
 
   Header always set X-Content-Type-Options "nosniff"