svn commit: r1928531 - apr/site/trunk/docs

Author: brane
Date: Wed Sep 17 08:25:42 2025
New Revision: 1928531

Log:
Try again; replace the existing CSP header with ours.

Modified:
   apr/site/trunk/docs/.htaccess

Modified: apr/site/trunk/docs/.htaccess
==============================================================================
--- apr/site/trunk/docs/.htaccess	Wed Sep 17 08:18:44 2025	(r1928530)
+++ apr/site/trunk/docs/.htaccess	Wed Sep 17 08:25:42 2025	(r1928531)
@@ -6,5 +6,4 @@ RewriteEngine On
 
 RewriteRule ^/?download(\.html)?/?$ /download.cgi [PT]
 
-Header add Content-Security-Policy "style-src https://fonts.googleapis.com"
-Header add Content-Security-Policy "font-src https://fonts.gstatic.com"
+Header set Content-Security-Policy "content-security-policy: default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/  ; script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/  ; style-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/ https://fonts.googleapis.com/; frame-ancestors 'self'; frame-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ http
 s://*.apache.org/ https://apache.org/ https://*.scarf.sh/; worker-src 'self' data: blob:; font-src https://fonts.gstatic.com/"