diff options
Diffstat (limited to 'files/common/nginx-snippets/security-headers.conf')
| -rw-r--r-- | files/common/nginx-snippets/security-headers.conf | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/files/common/nginx-snippets/security-headers.conf b/files/common/nginx-snippets/security-headers.conf new file mode 100644 index 00000000..b94d479d --- /dev/null +++ b/files/common/nginx-snippets/security-headers.conf @@ -0,0 +1,4 @@ +add_header X-Frame-Options DENY; +add_header X-Content-Type-Options nosniff; +add_header X-XSS-Protection "1; mode=block"; +# add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'"; |