Posted on February 11, 2018 at 6:01 pm

This is a quick post about Content-Security-Policy-Report-Only:

Content-Security-Policy-Report-Only: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri /_csp

Taken from HTTP headers of https://vimeo.com

To implement it with Nginx use add_header like this:

add_header Content-Security-Policy-Report-Only "default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri /_csp";

Other Posts

• Route OpenVPN Connections Through Floating IP
• How to Configure a Floating IP in a VPS (Hetzner)
• Set OpenVPN to Listed on a Specific IP Address
• Bash Trim Leading and Trailing Whitespace from a String
• Bash Get Name of Ethernet Network Interface
• VPN Providers with Dedicated Static IP Address
• OpenVPN Iptables Rules
• WireGuard VPN Iptables Rules

Updated Posts

• AMD Chipsets & Graphics Card Drivers for Windows 7, 8, 10
• AMD Radeon 7400 Drivers for Windows 10
• How to pass custom command-line parameters in InnoSetup
• Add Desktop shortcut for all Windows PC users
• Programmatically create desktop icon with InnoSetup
• GeneratePress - a Lightweight WordPress Theme 2021
• InnoSetup disable DesktopIcon via command-line
• Use cURL to authenticate with JWT Bearer tokens