mirror of
https://github.com/linuxserver/docker-swag.git
synced 2026-10-11 09:36:23 +09:00
Set frame-ancestors in Content-Security-Policy
https://infosec.mozilla.org/guidelines/web_security#x-frame-options
This commit is contained in:
1 parent
50371fea4f
commit
01dd12f567
1 file changed
+1
-1
@@ -40,7 +40,7 @@ ssl_early_data on;
|
||||
|
||||
# Optional additional headers
|
||||
#add_header Cache-Control "no-transform" always;
|
||||
#add_header Content-Security-Policy "upgrade-insecure-requests";
|
||||
#add_header Content-Security-Policy "upgrade-insecure-requests; frame-ancestors 'self'";
|
||||
#add_header Referrer-Policy "same-origin" always;
|
||||
#add_header X-Content-Type-Options "nosniff" always;
|
||||
#add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
|
||||
Reference in new issue
Block a user