security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

remove legacy Expect-CT header

Browse Source
This commit is contained in:
Daniel Micay 2022-08-11 13:53:31 -04:00
parent cc1a7f334e
commit 3991e51b7e
1 changed files with 0 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
nginx/snippets/security-headers-base.conf
View File

@ -5,9 +5,6 @@ add_header Cross-Origin-Opener-Policy "same-origin" always;
add_header Cross-Origin-Embedder-Policy "require-corp" always; add_header Cross-Origin-Embedder-Policy "require-corp" always;
add_header Origin-Agent-Cluster "?1" always; add_header Origin-Agent-Cluster "?1" always;
# obsolete when client system time is correct
add_header Expect-CT "enforce, max-age=63072000" always;
# obsolete and replaced with Content-Security-Policy frame-ancestors 'none' # obsolete and replaced with Content-Security-Policy frame-ancestors 'none'
add_header X-Frame-Options "DENY" always; add_header X-Frame-Options "DENY" always;