From 3a746fea1b94ad87e47d32c2311518be245df56b Mon Sep 17 00:00:00 2001 From: "srvproxy001.itguys.com.br" Date: Sat, 27 Sep 2025 15:44:35 -0300 Subject: [PATCH] =?UTF-8?q?[Auto-Sync]=20Atualiza=C3=A7=C3=A3o=20das=20con?= =?UTF-8?q?figura=C3=A7=C3=B5es=20em=20srvproxy001.itguys.com.br=20-=20202?= =?UTF-8?q?5-09-27=2015:44:34?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- nginx/sites-available/cloud.grupopralog.com.br.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nginx/sites-available/cloud.grupopralog.com.br.conf b/nginx/sites-available/cloud.grupopralog.com.br.conf index c1a8e73..7b4d93c 100644 --- a/nginx/sites-available/cloud.grupopralog.com.br.conf +++ b/nginx/sites-available/cloud.grupopralog.com.br.conf @@ -105,7 +105,7 @@ server { add_header X-Frame-Options "SAMEORIGIN" always; add_header Referrer-Policy "no-referrer" always; add_header Permissions-Policy "geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(), payment=()" always; - add_header Content-Security-Policy "default-src 'none'; base-uri 'none'; manifest-src 'self'; script-src 'nonce-hM7OrLSVwumFk18lv8kzCmeGt8EDVd/0GWKxgzqi5U' 'strict-dynamic'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://srvoffice001.itguys.com.br; font-src 'self' data:; connect-src 'self'; media-src 'self' data:; frame-src 'self' blob: https://srvoffice001.itguys.com.br; frame-ancestors 'self' https://srvoffice001.itguys.com.br; form-action 'self' https://srvoffice001.itguys.com.br;" always; + #add_header Content-Security-Policy "default-src 'none'; base-uri 'none'; manifest-src 'self'; script-src 'nonce-hM7OrLSVwumFk18lv8kzCmeGt8EDVd/0GWKxgzqi5U' 'strict-dynamic'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://srvoffice001.itguys.com.br; font-src 'self' data:; connect-src 'self'; media-src 'self' data:; frame-src 'self' blob: https://srvoffice001.itguys.com.br; frame-ancestors 'self' https://srvoffice001.itguys.com.br; form-action 'self' https://srvoffice001.itguys.com.br;" always; proxy_hide_header "X-Content-Type-Options"; proxy_hide_header "X-Frame-Options"; # Esconde header do backend para não duplicar proxy_hide_header "Feature-Policy";