From 1dda4933449ce4ff0a5da2dff9c4fd3db9c26220 Mon Sep 17 00:00:00 2001
From: Edwin Lyon <53972157+practical-engelbart@users.noreply.github.com>
Date: Wed, 28 Oct 2020 19:55:26 -0700
Subject: [PATCH] Update headers.conf

---
 nginx/snippets/headers.conf | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/nginx/snippets/headers.conf b/nginx/snippets/headers.conf
index 0c2ede7..75898a4 100644
--- a/nginx/snippets/headers.conf
+++ b/nginx/snippets/headers.conf
@@ -1,5 +1,4 @@
 add_header X-XSS-Protection "1; mode=block";
 add_header Referrer-Policy "no-referrer";  
-add_header Content-Security-Policy "upgrade-insecure-requests";
-add_header Permissions-Policy "geolocation=();midi=();notifications=(self);push=(self);sync-xhr=();microphone=();camera=();magnetometer=();gyroscope=();speaker=(self);vibrate=();fullscreen=(self);payment=();";
-
+add_header Content-Security-Policy "upgrade-insecure-requests; default-src 'none' *.example.com; script-src 'none'; style-src 'self' https: 'unsafe-inline'; img-src *; object-src 'none';frame-ancestors 'self' *.example.com";
+add_header Feature-Policy "accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; camera 'none'; encrypted-media 'none'; fullscreen 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'none'; sync-xhr 'self' https://haveibeenpwned.com https://twofactorauth.org; usb 'none'; vr 'none'";