# SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" # SEGURANÇA ORGANIZACIONAL - BASELINE Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header set X-Frame-Options "SAMEORIGIN" Header set X-Content-Type-Options "nosniff" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Permissions-Policy "geolocation=(), microphone=(), camera=()" Header set Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';"