server/nginx/xss

This commit is contained in:
Marc Beninca 2019-08-06 23:29:36 +02:00
parent 33644cfc7f
commit 3ac1b8dddf

View file

@ -391,6 +391,7 @@ Security
add_header Content-Security-Policy "default-src 'self'";
add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload" always;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
Sites
^^^^^