From 4f829a530baae2bef12aedef856cd3c74bf75e21 Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Mon, 21 Jun 2021 03:49:39 -0400
Subject: [PATCH] set security headers for Matrix client metadata

---
 nginx/nginx.conf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index e69e9439..4cf0d426 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -221,6 +221,8 @@ http {
         }
 
         location = /.well-known/matrix/client {
+            include snippets/security-headers.conf;
+            add_header Cross-Origin-Resource-Policy "cross-origin" always;
             add_header Access-Control-Allow-Origin "*";
             default_type application/json;
         }