
# Security Headers
<IfModule mod_headers.c>

    Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"

    Header always set X-Frame-Options "SAMEORIGIN"

    Header always set X-Content-Type-Options "nosniff"

    Header always set Referrer-Policy "strict-origin-when-cross-origin"

    Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
    
    # Header always set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';"
    # Header always set Content-Security-Policy "default-src 'self' https: data:; script-src 'self' https: 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data:;"
    Header always set Content-Security-Policy "
default-src 'self' https: data: blob:;
script-src 'self' https: 'unsafe-inline' 'unsafe-eval';
style-src 'self' https: 'unsafe-inline';
img-src 'self' https: data: blob:;
font-src 'self' https: data:;
connect-src 'self' https:;
frame-src 'self' https:;
'unsafe-eval'
blob:
connect-src
"


</IfModule>
# BEGIN WordPress
# The directives (lines) between "BEGIN WordPress" and "END WordPress" are
# dynamically generated, and should only be modified via WordPress filters.
# Any changes to the directives between these markers will be overwritten.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /Clients/ramsayanimalclinic/wp/
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /Clients/ramsayanimalclinic/wp/index.php [L]
</IfModule>

# END WordPress