# crmv@309431_3.4
# In order to enable this htaccess execute:
# a2enmod headers
# systemctl restart apache2

<IfModule mod_headers.c>
	Header set X-Content-Type-Options "nosniff"
	Header set Referrer-Policy "origin"
	Header set Permissions-Policy "camera=(), autoplay=(self), display-capture=(), fullscreen=(self), gamepad=(), geolocation=(self), microphone=(), web-share=()"
	Header set X-Frame-Options "SAMEORIGIN"
	Header set Content-Security-Policy "child-src *; connect-src *; font-src *; img-src * data:; media-src *; object-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; worker-src 'self'; frame-ancestors 'self'"
</IfModule>