From 0f245e159f655b09219c4d019319073e080930ca Mon Sep 17 00:00:00 2001
From: SouthFox-D <southfoxdreamer@gmail.com>
Date: Tue, 22 Mar 2022 10:45:58 +0800
Subject: [PATCH] security: add custome headers

---
 .github/workflows/deploy.yml | 1 +
 _headers                     | 6 ++++++
 2 files changed, 7 insertions(+)
 create mode 100644 _headers

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 9d5f49e..ae835c9 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -44,6 +44,7 @@ jobs:
         fonttools ttLib.woff2 compress -o Zpix.woff2 Zpix.subset.ttf
         mv Zpix.woff2 ./public/css/fonts
         mv Zpix.subset.ttf ./public/css/fonts/Zpix.ttf
+        mv _headers ./public
         cd ./public
         git init
         git add --all .
diff --git a/_headers b/_headers
new file mode 100644
index 0000000..f384de1
--- /dev/null
+++ b/_headers
@@ -0,0 +1,6 @@
+/*
+  X-Frame-Options: allow-from https://mantyke.icu/
+  X-Content-Type-Options: nosniff
+  Referrer-Policy: no-referrer
+  Permissions-Policy: document-domain=()
+  Content-Security-Policy: script-src 'self'; frame-ancestors 'none';
\ No newline at end of file