From 8934514c5b86e561cee5725d5808725264b99c19 Mon Sep 17 00:00:00 2001
From: sergiotarxz <sergiotarxz@posteo.net>
Date: Thu, 10 Nov 2022 21:40:16 +0100
Subject: [PATCH] Adding Content-Security-Policy

---
 templates/layouts/default.html.ep | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/templates/layouts/default.html.ep b/templates/layouts/default.html.ep
index b2f1437..fc4582f 100644
--- a/templates/layouts/default.html.ep
+++ b/templates/layouts/default.html.ep
@@ -4,6 +4,9 @@
 	  <script src="/js/index.js"></script>
 	  <link rel="stylesheet" href="/css/styles.css"/>
 	  <title><%= title %></title>
+	  <meta
+	    http-equiv="Content-Security-Policy"
+	      content="default-src 'self'; img-src https://*; child-src 'none';" />
 	  <meta name="description" content="Lee más sobre: <%= title %>"/>
 	  <meta property="og:title" content="<%= title %>"/>
 	  <meta property="og:site_name" content="Burguillos.info" />