more security improvements

thepurplebubble · Aug 7, 2024 · d6fb552 · d6fb552
1 parent 3809566
commit d6fb552
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/layouts/Layout.astro b/src/layouts/Layout.astro
@@ -31,6 +31,13 @@ const year = new Date().getFullYear();
       http-equiv="Content-Security-Policy"
       content="default-src 'self'; img-src https://*; child-src 'none';"
     />
+    <meta
+      http-equiv="Strict-Transport-Security"
+      content="max-age=63072000; includeSubDomains; preload"
+    />
+    <meta http-equiv="X-Frame-Options" content="DENY" />
+    <meta http-equiv="X-Content-Type-Options" content="nosniff" />
+    <meta name="referrer" content="strict-origin" />
     <meta charset="utf-8" />
     <meta property="twitter:card" content="summary_large_image" />
     <script