expand same-origin CORP header usage

2021-04-14 23:08:44 -04:00 · 2021-04-14 23:08:44 -04:00 · c7d1bdce2e
commit c7d1bdce2e
parent 63eed1a3ec
1 changed files with 1 additions and 0 deletions
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@ -231,6 +231,7 @@ http {

        location ~ "\.(ico|webmanifest)$" {
            include snippets/security-headers.conf;
+            add_header Cross-Origin-Resource-Policy "same-origin";
            add_header Cache-Control "public, max-age=604800";
        }