chore: adding Content-Security-Policy (CSP)

kiraum · Oct 5, 2024 · 9332a08 · 9332a08
1 parent e9c65f2
commit 9332a08
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/modules/static_website/main.tf b/modules/static_website/main.tf
@@ -441,8 +441,9 @@ resource "aws_cloudfront_response_headers_policy" "security_headers_policy" {
       preload                    = true
       override                   = true
     }
-    content_type_options {
-      override = true
+    content_security_policy {
+      content_security_policy = "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:;"
+      override                = true
     }
   }
 }