titanz/NGINX-Configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Restrict CORP

Browse Source
This commit is contained in:
Tommy 2024-06-25 15:15:59 -07:00 committed by GitHub
parent 03149c183c
commit 4f1b4b6dcb
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
etc/nginx/snippets/cross-origin-security.conf
View File

@ -2,10 +2,10 @@
# Meant to be used globally, but some apps may need a manual overwrite, so this is split out from security.conf # Meant to be used globally, but some apps may need a manual overwrite, so this is split out from security.conf
proxy_hide_header Cross-Origin-Resource-Policy; proxy_hide_header Cross-Origin-Resource-Policy;
add_header Cross-Origin-Resource-Policy cross-origin always; add_header Cross-Origin-Resource-Policy same-origin always;
proxy_hide_header Cross-Origin-Opener-Policy; proxy_hide_header Cross-Origin-Opener-Policy;
add_header Cross-Origin-Opener-Policy same-origin always; add_header Cross-Origin-Opener-Policy same-origin always;
proxy_hide_header Cross-Origin-Opener-Policy; proxy_hide_header Cross-Origin-Embedder-Policy;
Cross-Origin-Embedder-Policy require-corp always; add_header Cross-Origin-Embedder-Policy require-corp always;