xa-note/_headers at main · fo2w/xa-note · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
# Set security headers for all pages
/*
  X-Frame-Options: DENY
  X-Content-Type-Options: nosniff
  X-XSS-Protection: 1; mode=block
  Referrer-Policy: strict-origin-when-cross-origin

# Set correct MIME types for static assets
/assets/*.js
  Content-Type: application/javascript

/assets/*.css
  Content-Type: text/css

/assets/*.woff2
  Content-Type: font/woff2

/assets/*.woff
  Content-Type: font/woff

/assets/*.ttf
  Content-Type: font/ttf

/assets/*.png
  Content-Type: image/png

/assets/*.jpg
  Content-Type: image/jpeg

/assets/*.jpeg
  Content-Type: image/jpeg

/assets/*.gif
  Content-Type: image/gif

/assets/*.svg
  Content-Type: image/svg+xml

# Favicon and other static files
/favicon.ico
  Content-Type: image/x-icon

/favicon*.png
  Content-Type: image/png

/manifest.json
  Content-Type: application/json

/robots.txt
  Content-Type: text/plain

/sitemap.xml
  Content-Type: application/xml