RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule ^(.*)$ https://cyberjinh.fr/$1 [R,L] Header always set Strict-Transport-Security "max-age=2592000; includeSubDomains; preload Header always set X-Frame-Options "SAMEORIGIN" Header always set X-Xss-Protection "1; mode=block" Header always set X-Content-Type-Options "nosniff" Header always set Referrer-Policy "same-origin" Header always set Feature-Policy "microphone 'none'; payment 'none'; sync-xhr 'self' https://cyberjinh.fr" Header always set X-FRAME-OPTIONS "DENY" Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure Header always set Content-Security-Policy: "default-src 'none';" Header always set Content-Security-Policy: "script-src 'self' https://cyberjinh.fr;" Header always set Content-Security-Policy: "style-src 'self' https://cyberjinh.fr;" Header always set Content-Security-Policy: "img-src 'self' https://cyberjinh.fr https://xmpp.net https://compliance.conversations.im https://static.fsf.org;"