Add X-Permitted-Cross-Domain-Policies

Signed-off-by: Tommy <contact@tommytran.io>
2024-10-13 07:33:28 -07:00
parent 11189cffe7
commit ba554095f1
1 changed files with 3 additions and 0 deletions
--- a/etc/nginx/snippets/security.conf
+++ b/etc/nginx/snippets/security.conf
@@ -13,6 +13,9 @@ add_header X-Content-Type-Options "nosniff" always;
 proxy_hide_header X-Frame-Options;
 add_header X-Frame-Options "SAMEORIGIN" always;

+proxy_hide_header X-Permitted-Cross-Domain-Policies;
+add_header X-Permitted-Cross-Domain-Policies "none" always;
+
 # Obsolete and replaced by Content-Security-Policy
 # Only here to pass Hardenize checks
 proxy_hide_header X-XSS-Protection;