feat: allow disabling CSP, following the hierarchy

Introduces new option `enable_csp`, true by default.
Can be set on a page, section or globally.
This commit is contained in:
welpo
2024-03-15 15:04:37 +01:00
parent 8537bbc10e
commit 5e0cbdd67d
10 changed files with 30 additions and 7 deletions

View File

@@ -1,7 +1,7 @@
+++
title = "Mastering tabi Settings: A Comprehensive Guide"
date = 2023-09-18
updated = 2024-01-07
updated = 2024-03-15
description = "Discover the many ways you can customise your tabi site."
[taxonomies]
@@ -754,6 +754,8 @@ allowed_domains = [
]
```
This feature is enabled by default. To disable it (and allow all connections), set `enable_csp = false` on a page, section or globally. The `enable_csp` setting follows the [hierarchy](#settings-hierarchy).
See the [CSP documentation page](/blog/security/) for more information.
---