Restrict CORP
This commit is contained in:
		@@ -2,10 +2,10 @@
 | 
			
		||||
# Meant to be used globally, but some apps may need a manual overwrite, so this is split out from security.conf
 | 
			
		||||
 | 
			
		||||
proxy_hide_header Cross-Origin-Resource-Policy;
 | 
			
		||||
add_header Cross-Origin-Resource-Policy cross-origin always;
 | 
			
		||||
add_header Cross-Origin-Resource-Policy same-origin always;
 | 
			
		||||
 | 
			
		||||
proxy_hide_header Cross-Origin-Opener-Policy;
 | 
			
		||||
add_header Cross-Origin-Opener-Policy same-origin always;
 | 
			
		||||
 | 
			
		||||
proxy_hide_header Cross-Origin-Opener-Policy;
 | 
			
		||||
Cross-Origin-Embedder-Policy require-corp always;
 | 
			
		||||
proxy_hide_header Cross-Origin-Embedder-Policy;
 | 
			
		||||
add_header Cross-Origin-Embedder-Policy require-corp always;
 | 
			
		||||
		Reference in New Issue
	
	Block a user