titanz/NGINX-Configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add X-Permitted-Cross-Domain-Policies

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-10-13 07:33:28 -07:00 committed by GitHub
parent 11189cffe7
commit ba554095f1
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
etc/nginx/snippets/security.conf
View File

@ -13,6 +13,9 @@ add_header X-Content-Type-Options "nosniff" always;
proxy_hide_header X-Frame-Options; proxy_hide_header X-Frame-Options;
add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Frame-Options "SAMEORIGIN" always;
proxy_hide_header X-Permitted-Cross-Domain-Policies;
add_header X-Permitted-Cross-Domain-Policies "none" always;
# Obsolete and replaced by Content-Security-Policy # Obsolete and replaced by Content-Security-Policy
# Only here to pass Hardenize checks # Only here to pass Hardenize checks
proxy_hide_header X-XSS-Protection; proxy_hide_header X-XSS-Protection;