add missing qualifier for CORP header setting

2021-04-17 04:55:49 -04:00
parent d89ba6bbcf
commit 8a392845a7
1 changed files with 1 additions and 1 deletions
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -309,7 +309,7 @@ http {
        root /srv/mta-sts;

        include snippets/security-headers.conf;
-        add_header Cross-Origin-Resource-Policy "same-origin";
+        add_header Cross-Origin-Resource-Policy "same-origin" always;
    }

    server {