hardening http headers

master
apoc4lyps 2018-05-28 12:28:23 +02:00 committed by GitHub
parent 37e6c50a9b
commit 918343865e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions

View File

@ -35,7 +35,9 @@ server {
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
add_header X-Download-Options noopen;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Permitted-Cross-Domain-Policies none;
add_header Referrer-Policy no-referrer-when-downgrade;
index index.php index.html;