Content-Security-Policy:
<meta http-equiv="Content-Security-Policy" content="default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://domain.de">
https://wiki.selfhtml.org/wiki/Sicherheit/Content_Security_Policy
https://blog.sucuri.net/2023/04/how-to-set-up-a-content-security-policy-csp-in-3-steps.html
X-Frame-Options / Access-Control-Allow-Origin:
<IfModule mod_headers.c>
Header set Access-Control-Allow-Origin "*"
</IfModule>https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
https://stackoverflow.com/questions/13421463/htaccess-access-control-allow-origin
Recent Pastes