ab-nginx/config/headersSecurity.conf

14 lines
513 B
Plaintext
Raw Normal View History

2019-10-16 23:44:47 -06:00
add_header Feature-Policy "geolocation 'self'";
add_header Referrer-Policy "strict-origin" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Download-Options noopen;
add_header X-Frame-Options DENY;
add_header X-Permitted-Cross-Domain-Policies none;
add_header X-UA-Compatible "IE=edge";
add_header X-XSS-Protection "1; mode=block" always;
# prevent search engines from indexing sites on this server
# comment the line below if you are running public sites!
add_header X-Robots-Tag none;