mirror of
https://github.com/travelerdev/frameloader.git
synced 2026-10-22 14:02:31 +02:00
Zack SheppardandClaude Opus 5.5
0568df501a
- wrangler.jsonc at the repo root: a static-assets Worker serving apps/web/dist on www.frameloader.com, workers.dev off, previews on - _headers with a strict CSP, security headers and immutable caching for hashed assets; a 404 page - Root-absolute asset paths and the clean /terms URL (app links too) - Wrangler as a root dev dependency, with preview:web and deploy:web - README section with the Workers Builds settings Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
17 lines
795 B
Plaintext
17 lines
795 B
Plaintext
# Applied by Cloudflare to every static asset response. https://developers.cloudflare.com/workers/static-assets/headers/
|
|
/*
|
|
Content-Security-Policy: default-src 'none'; style-src 'self'; img-src 'self'; font-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'
|
|
X-Content-Type-Options: nosniff
|
|
Referrer-Policy: no-referrer
|
|
Permissions-Policy: camera=(), microphone=(), geolocation=(), interest-cohort=()
|
|
Cross-Origin-Opener-Policy: same-origin
|
|
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
|
|
# Vite fingerprints everything in /assets, so it can be cached forever.
|
|
/assets/*
|
|
Cache-Control: public, max-age=31536000, immutable
|
|
|
|
# Keep preview and version URLs out of search results.
|
|
https://:version.:subdomain.workers.dev/*
|
|
X-Robots-Tag: noindex
|