Content Security Policy (CSP)

ulynks · Feb 22, 2024 · 94bf2ce · 94bf2ce
1 parent c324abd
commit 94bf2ce
Show file tree

Hide file tree

Showing 20 changed files with 81 additions and 40 deletions.
diff --git a/.vscode/tasks.json b/.vscode/tasks.json
@@ -19,7 +19,7 @@
       "detail": "Start Hugo’s development server to view the site. Press Ctrl + C to stop Hugo’s development server."
     },
     {
-      "label": "upgrade",
+      "label": "yarn",
       "command": "yarn upgrade --latest && yarn list && npx depcheck",
       "detail": "Upgrade package.json."
     },

diff --git a/hugo.toml b/hugo.toml
@@ -4,6 +4,19 @@ title = 'Fixie Agents by uLynks'
 # theme = 'ananke'
 theme = 'ulynks'
 
+# Configure server
+# https://gohugo.io/getting-started/configuration/#configure-server
+
+[server]
+[[server.headers]]
+    for = '/**'
+    [server.headers.values]
+      Content-Security-Policy = "default-src 'self' https://api.fixie.ai https://cdn.jsdelivr.net https://embed.fixie.ai https://eu.umami.is https://fonts.gstatic.com https://fonts.googleapis.com"
+      Referrer-Policy = 'strict-origin-when-cross-origin'
+      X-Content-Type-Options = 'nosniff'
+      X-Frame-Options = 'DENY'
+      X-XSS-Protection = '1; mode=block'
+
 [params]
   subtitle = 'Growing on Fyn, Denmark 🇩🇰'
   umami = '3cf42fbf-5ff7-4ba7-b4d1-607641c5b4e8'

diff --git a/public/assets/main.css b/public/assets/main.css
diff --git a/public/categories/index.html b/public/categories/index.html
@@ -19,12 +19,14 @@
   <meta property="twitter:title" content="Fixie Agents by uLynks | Categories">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
   <link rel="canonical" href="http://localhost:1313/">
-  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="dns-prefetch" href="https://cdn.jsdelivr.net">
+  <link rel="dns-prefetch" href="https://embed.fixie.ai">
+  <link rel="dns-prefetch" href="https://eu.umami.is">
+  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="shortcut icon" href="/favicon.ico">
   <link rel="stylesheet" type="text/css" href="/assets/main.css">
 </head><body>
-    <div style="max-width: 800px" class="mx-auto py-1 px-2">
+    <div class="w-800 mx-auto py-1 px-2">
 <nav class="UnderlineNav" aria-label="Nav bar">
   <div class="UnderlineNav-body">
     <a href="/"><img class="avatar" height="40" alt="Fixie Agents by uLynks" src="/img/logo.png" width="40"></a>
@@ -54,7 +56,7 @@ <h1>Categories</h1>
 
 
 <footer class="Footer py-3">
-  <p><a style="color:black" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
+  <p><a class="fgColor-default" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
       2024</a>. All rights reserved.
   </p>
 </footer></div><script src="https://cdn.jsdelivr.net/npm/jquery@3.7.1/dist/jquery.min.js"

diff --git a/public/django/index.html b/public/django/index.html
@@ -19,12 +19,14 @@
   <meta property="twitter:title" content="Fixie Agents by uLynks | Django">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
   <link rel="canonical" href="http://localhost:1313/">
-  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="dns-prefetch" href="https://cdn.jsdelivr.net">
+  <link rel="dns-prefetch" href="https://embed.fixie.ai">
+  <link rel="dns-prefetch" href="https://eu.umami.is">
+  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="shortcut icon" href="/favicon.ico">
   <link rel="stylesheet" type="text/css" href="/assets/main.css">
 </head><body>
-    <div style="max-width: 800px" class="mx-auto py-1 px-2">
+    <div class="w-800 mx-auto py-1 px-2">
 <nav class="UnderlineNav" aria-label="Nav bar">
   <div class="UnderlineNav-body">
     <a href="/"><img class="avatar" height="40" alt="Fixie Agents by uLynks" src="/img/logo.png" width="40"></a>
@@ -60,7 +62,7 @@
   </iframe>
 </main>
 <footer class="Footer py-3">
-  <p><a style="color:black" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
+  <p><a class="fgColor-default" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
       2024</a>. All rights reserved.
   </p>
 </footer></div><script src="https://cdn.jsdelivr.net/npm/jquery@3.7.1/dist/jquery.min.js"

diff --git a/public/index.html b/public/index.html
@@ -20,12 +20,14 @@
   <meta property="twitter:title" content="Fixie Agents by uLynks">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
   <link rel="canonical" href="http://localhost:1313/">
-  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="dns-prefetch" href="https://cdn.jsdelivr.net">
+  <link rel="dns-prefetch" href="https://embed.fixie.ai">
+  <link rel="dns-prefetch" href="https://eu.umami.is">
+  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="shortcut icon" href="/favicon.ico">
   <link rel="stylesheet" type="text/css" href="/assets/main.css">
 </head><body>
-    <div style="max-width: 800px" class="mx-auto py-1 px-2">
+    <div class="w-800 mx-auto py-1 px-2">
 <nav class="UnderlineNav" aria-label="Nav bar">
   <div class="UnderlineNav-body">
     <a href="/"><img class="avatar" height="40" alt="Fixie Agents by uLynks" src="/img/logo.png" width="40"></a>
@@ -76,7 +78,7 @@ <h1 class="title-h1 border-bottom-0 mb-0">Fixie Agents by uLynks</h1>
 
 </main>
 <footer class="Footer py-3">
-  <p><a style="color:black" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
+  <p><a class="fgColor-default" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
       2024</a>. All rights reserved.
   </p>
 </footer></div><script src="https://cdn.jsdelivr.net/npm/jquery@3.7.1/dist/jquery.min.js"

diff --git a/public/posts/index.html b/public/posts/index.html
@@ -19,12 +19,14 @@
   <meta property="twitter:title" content="Fixie Agents by uLynks | Posts">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
   <link rel="canonical" href="http://localhost:1313/">
-  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="dns-prefetch" href="https://cdn.jsdelivr.net">
+  <link rel="dns-prefetch" href="https://embed.fixie.ai">
+  <link rel="dns-prefetch" href="https://eu.umami.is">
+  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="shortcut icon" href="/favicon.ico">
   <link rel="stylesheet" type="text/css" href="/assets/main.css">
 </head><body>
-    <div style="max-width: 800px" class="mx-auto py-1 px-2">
+    <div class="w-800 mx-auto py-1 px-2">
 <nav class="UnderlineNav" aria-label="Nav bar">
   <div class="UnderlineNav-body">
     <a href="/"><img class="avatar" height="40" alt="Fixie Agents by uLynks" src="/img/logo.png" width="40"></a>
@@ -58,7 +60,7 @@ <h2><a href="/posts/my-first-post/">My First Post</a></h2>
 Visit the Hugo website!
 
 <footer class="Footer py-3">
-  <p><a style="color:black" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
+  <p><a class="fgColor-default" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
       2024</a>. All rights reserved.
   </p>
 </footer></div><script src="https://cdn.jsdelivr.net/npm/jquery@3.7.1/dist/jquery.min.js"

diff --git a/public/posts/my-first-post/index.html b/public/posts/my-first-post/index.html
@@ -19,12 +19,14 @@
   <meta property="twitter:title" content="Fixie Agents by uLynks | My First Post">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
   <link rel="canonical" href="http://localhost:1313/">
-  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="dns-prefetch" href="https://cdn.jsdelivr.net">
+  <link rel="dns-prefetch" href="https://embed.fixie.ai">
+  <link rel="dns-prefetch" href="https://eu.umami.is">
+  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="shortcut icon" href="/favicon.ico">
   <link rel="stylesheet" type="text/css" href="/assets/main.css">
 </head><body>
-    <div style="max-width: 800px" class="mx-auto py-1 px-2">
+    <div class="w-800 mx-auto py-1 px-2">
 <nav class="UnderlineNav" aria-label="Nav bar">
   <div class="UnderlineNav-body">
     <a href="/"><img class="avatar" height="40" alt="Fixie Agents by uLynks" src="/img/logo.png" width="40"></a>
@@ -63,7 +65,7 @@ <h2 id="introduction">Introduction</h2>
   </iframe>
 </main>
 <footer class="Footer py-3">
-  <p><a style="color:black" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
+  <p><a class="fgColor-default" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
       2024</a>. All rights reserved.
   </p>
 </footer></div><script src="https://cdn.jsdelivr.net/npm/jquery@3.7.1/dist/jquery.min.js"

diff --git a/public/python/index.html b/public/python/index.html
@@ -19,12 +19,14 @@
   <meta property="twitter:title" content="Fixie Agents by uLynks | Python">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
   <link rel="canonical" href="http://localhost:1313/">
-  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="dns-prefetch" href="https://cdn.jsdelivr.net">
+  <link rel="dns-prefetch" href="https://embed.fixie.ai">
+  <link rel="dns-prefetch" href="https://eu.umami.is">
+  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="shortcut icon" href="/favicon.ico">
   <link rel="stylesheet" type="text/css" href="/assets/main.css">
 </head><body>
-    <div style="max-width: 800px" class="mx-auto py-1 px-2">
+    <div class="w-800 mx-auto py-1 px-2">
 <nav class="UnderlineNav" aria-label="Nav bar">
   <div class="UnderlineNav-body">
     <a href="/"><img class="avatar" height="40" alt="Fixie Agents by uLynks" src="/img/logo.png" width="40"></a>
@@ -60,7 +62,7 @@
   </iframe>
 </main>
 <footer class="Footer py-3">
-  <p><a style="color:black" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
+  <p><a class="fgColor-default" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
       2024</a>. All rights reserved.
   </p>
 </footer></div><script src="https://cdn.jsdelivr.net/npm/jquery@3.7.1/dist/jquery.min.js"

diff --git a/public/react/index.html b/public/react/index.html
@@ -19,12 +19,14 @@
   <meta property="twitter:title" content="Fixie Agents by uLynks | React">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
   <link rel="canonical" href="http://localhost:1313/">
-  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="dns-prefetch" href="https://cdn.jsdelivr.net">
+  <link rel="dns-prefetch" href="https://embed.fixie.ai">
+  <link rel="dns-prefetch" href="https://eu.umami.is">
+  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="shortcut icon" href="/favicon.ico">
   <link rel="stylesheet" type="text/css" href="/assets/main.css">
 </head><body>
-    <div style="max-width: 800px" class="mx-auto py-1 px-2">
+    <div class="w-800 mx-auto py-1 px-2">
 <nav class="UnderlineNav" aria-label="Nav bar">
   <div class="UnderlineNav-body">
     <a href="/"><img class="avatar" height="40" alt="Fixie Agents by uLynks" src="/img/logo.png" width="40"></a>
@@ -60,7 +62,7 @@
   </iframe>
 </main>
 <footer class="Footer py-3">
-  <p><a style="color:black" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
+  <p><a class="fgColor-default" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
       2024</a>. All rights reserved.
   </p>
 </footer></div><script src="https://cdn.jsdelivr.net/npm/jquery@3.7.1/dist/jquery.min.js"

diff --git a/public/scopus/index.html b/public/scopus/index.html
@@ -19,12 +19,14 @@
   <meta property="twitter:title" content="Fixie Agents by uLynks | Scopus">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
   <link rel="canonical" href="http://localhost:1313/">
-  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="dns-prefetch" href="https://cdn.jsdelivr.net">
+  <link rel="dns-prefetch" href="https://embed.fixie.ai">
+  <link rel="dns-prefetch" href="https://eu.umami.is">
+  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="shortcut icon" href="/favicon.ico">
   <link rel="stylesheet" type="text/css" href="/assets/main.css">
 </head><body>
-    <div style="max-width: 800px" class="mx-auto py-1 px-2">
+    <div class="w-800 mx-auto py-1 px-2">
 <nav class="UnderlineNav" aria-label="Nav bar">
   <div class="UnderlineNav-body">
     <a href="/"><img class="avatar" height="40" alt="Fixie Agents by uLynks" src="/img/logo.png" width="40"></a>
@@ -60,7 +62,7 @@
   </iframe>
 </main>
 <footer class="Footer py-3">
-  <p><a style="color:black" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
+  <p><a class="fgColor-default" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
       2024</a>. All rights reserved.
   </p>
 </footer></div><script src="https://cdn.jsdelivr.net/npm/jquery@3.7.1/dist/jquery.min.js"

diff --git a/public/sdu/index.html b/public/sdu/index.html
@@ -19,12 +19,14 @@
   <meta property="twitter:title" content="Fixie Agents by uLynks | SDU">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
   <link rel="canonical" href="http://localhost:1313/">
-  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="dns-prefetch" href="https://cdn.jsdelivr.net">
+  <link rel="dns-prefetch" href="https://embed.fixie.ai">
+  <link rel="dns-prefetch" href="https://eu.umami.is">
+  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="shortcut icon" href="/favicon.ico">
   <link rel="stylesheet" type="text/css" href="/assets/main.css">
 </head><body>
-    <div style="max-width: 800px" class="mx-auto py-1 px-2">
+    <div class="w-800 mx-auto py-1 px-2">
 <nav class="UnderlineNav" aria-label="Nav bar">
   <div class="UnderlineNav-body">
     <a href="/"><img class="avatar" height="40" alt="Fixie Agents by uLynks" src="/img/logo.png" width="40"></a>
@@ -60,7 +62,7 @@
   </iframe>
 </main>
 <footer class="Footer py-3">
-  <p><a style="color:black" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
+  <p><a class="fgColor-default" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
       2024</a>. All rights reserved.
   </p>
 </footer></div><script src="https://cdn.jsdelivr.net/npm/jquery@3.7.1/dist/jquery.min.js"

diff --git a/public/tags/index.html b/public/tags/index.html
@@ -19,12 +19,14 @@
   <meta property="twitter:title" content="Fixie Agents by uLynks | Tags">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
   <link rel="canonical" href="http://localhost:1313/">
-  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="dns-prefetch" href="https://cdn.jsdelivr.net">
+  <link rel="dns-prefetch" href="https://embed.fixie.ai">
+  <link rel="dns-prefetch" href="https://eu.umami.is">
+  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="shortcut icon" href="/favicon.ico">
   <link rel="stylesheet" type="text/css" href="/assets/main.css">
 </head><body>
-    <div style="max-width: 800px" class="mx-auto py-1 px-2">
+    <div class="w-800 mx-auto py-1 px-2">
 <nav class="UnderlineNav" aria-label="Nav bar">
   <div class="UnderlineNav-body">
     <a href="/"><img class="avatar" height="40" alt="Fixie Agents by uLynks" src="/img/logo.png" width="40"></a>
@@ -54,7 +56,7 @@ <h1>Tags</h1>
 
 
 <footer class="Footer py-3">
-  <p><a style="color:black" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
+  <p><a class="fgColor-default" href="https://www.ulynks.io/" target="_blank">Fixie Agents by uLynks Copyright
       2024</a>. All rights reserved.
   </p>
 </footer></div><script src="https://cdn.jsdelivr.net/npm/jquery@3.7.1/dist/jquery.min.js"

diff --git a/static/assets/main.css b/static/assets/main.css
diff --git a/themes/ulynks/assets/css/app.css b/themes/ulynks/assets/css/app.css
diff --git a/themes/ulynks/assets/scss/app.scss b/themes/ulynks/assets/scss/app.scss
@@ -1,5 +1,7 @@
 // Primer CSS Typography variables
 // see: <https://github.com/pages-themes/primer/blob/master/_sass/primer-support/lib/variables/typography.scss>
+// CSS utilities > Colors
+// see: <https://primer.style/foundations/css-utilities/colors>
 
 // Heading sizes - desktop
 // $h1-size: 32px !default;
@@ -14,6 +16,10 @@ $body-font: "Poppins", sans-serif !default;
 
 // Custom
 
+.w-800 {
+  max-width: 800px;
+}
+
 .Footer {
   position: fixed;
   bottom: 0;

diff --git a/themes/ulynks/layouts/_default/baseof.html b/themes/ulynks/layouts/_default/baseof.html
@@ -6,7 +6,7 @@
   {{- partial "head.html" . -}}
 
   <body>
-    <div style="max-width: 800px" class="mx-auto py-1 px-2">
+    <div class="w-800 mx-auto py-1 px-2">
       {{- partial "header.html" . -}}
       {{- block "main" . }}{{- end }}
       {{- partial "footer.html" . -}}

diff --git a/themes/ulynks/layouts/partials/footer.html b/themes/ulynks/layouts/partials/footer.html
@@ -1,5 +1,5 @@
 <footer class="Footer py-3">
-  <p><a style="color:black" href="{{ .Site.Params.mainWebsite }}" target="_blank">{{ .Site.Title }} Copyright
+  <p><a class="fgColor-default" href="{{ .Site.Params.mainWebsite }}" target="_blank">{{ .Site.Title }} Copyright
       {{ now.Year }}</a>. All rights reserved.
   </p>
 </footer>
diff --git a/themes/ulynks/layouts/partials/head.html b/themes/ulynks/layouts/partials/head.html
@@ -17,8 +17,10 @@
   <meta property="twitter:title" content="{{ $title }}">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
   <link rel="canonical" href="{{ .Site.BaseURL }}">
-  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="dns-prefetch" href="https://cdn.jsdelivr.net">
+  <link rel="dns-prefetch" href="https://embed.fixie.ai">
+  <link rel="dns-prefetch" href="https://eu.umami.is">
+  <link rel="dns-prefetch" href="https://fonts.googleapis.com">
   <link rel="shortcut icon" href="/favicon.ico">
   <link rel="stylesheet" type="text/css" href="/assets/main.css">
 </head>
diff --git a/yarn.lock b/yarn.lock
@@ -1652,9 +1652,9 @@ caniuse-api@^3.0.0:
     lodash.uniq "^4.5.0"
 
 caniuse-lite@^1.0.0, caniuse-lite@^1.0.30001578, caniuse-lite@^1.0.30001587:
-  version "1.0.30001588"
-  resolved "https://registry.yarnpkg.com/caniuse-lite/-/caniuse-lite-1.0.30001588.tgz#07f16b65a7f95dba82377096923947fb25bce6e3"
-  integrity sha512-+hVY9jE44uKLkH0SrUTqxjxqNTOWHsbnQDIKjwkZ3lNTzUUVdBLBGXtj/q5Mp5u98r3droaZAewQuEDzjQdZlQ==
+  version "1.0.30001589"
+  resolved "https://registry.yarnpkg.com/caniuse-lite/-/caniuse-lite-1.0.30001589.tgz#7ad6dba4c9bf6561aec8291976402339dc157dfb"
+  integrity sha512-vNQWS6kI+q6sBlHbh71IIeC+sRwK2N3EDySc/updIGhIee2x5z00J4c1242/5/d6EpEMdOnk/m+6tuk4/tcsqg==
 
 chalk@^2.4.1, chalk@^2.4.2:
   version "2.4.2"