From efcbebba2a8dd2f368ecaddcc43760eb7ab98bf6 Mon Sep 17 00:00:00 2001
From: Jannik Beyerstedt <code@jannikbeyerstedt.de>
Date: Sat, 15 Oct 2016 20:23:48 +0200
Subject: [PATCH] [SITE] move CSP header to html-head to exclude it from panel
 resources

---
 site/config/config.php           | 1 -
 site/snippets/base/html-head.php | 1 +
 2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/site/config/config.php b/site/config/config.php
index 4b1fe15..17d1dc1 100644
--- a/site/config/config.php
+++ b/site/config/config.php
@@ -1,5 +1,4 @@
 <?php
-header("Content-Security-Policy: default-src 'self'; style-src 'self' 'nonce-nRfqpuKWNuYyUAFPTr6WVNZk9' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-src https://www.youtube-nocookie.com; script-src 'self' 'nonce-nRfqpuKWNuYyUAFPTr6WVNZk9' https://jannikb.aquila.uberspace.de/piwik/; img-src 'self' https://jannikb.aquila.uberspace.de/piwik/");
 //header("X-Content-Type-Options: nosniff");  // enabled at server-side
 //header("X-Frame-Options: deny");            // enabled at server-side
 //header("X-Xss-Protection: 1; mode=block");  // enabled at server-side
diff --git a/site/snippets/base/html-head.php b/site/snippets/base/html-head.php
index 4861a6e..2c02ddf 100644
--- a/site/snippets/base/html-head.php
+++ b/site/snippets/base/html-head.php
@@ -5,6 +5,7 @@
 // copyright: Jannik Beyerstedt | https://jannikbeyerstedt.de
 // license: http://www.gnu.org/licenses/gpl-3.0.txt GPLv3 License
 // -------------------------------------------
+header("Content-Security-Policy: default-src 'self'; style-src 'self' 'nonce-nRfqpuKWNuYyUAFPTr6WVNZk9' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-src https://www.youtube-nocookie.com; script-src 'self' 'nonce-nRfqpuKWNuYyUAFPTr6WVNZk9' https://jannikb.aquila.uberspace.de/piwik/; img-src 'self' https://jannikb.aquila.uberspace.de/piwik/");
 
 if( $page->isHomePage() ) {
   $title = $site->title()->html();