security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

disable legacy X-XSS-Protection feature

Browse Source
This commit is contained in:
Daniel Micay 2021-12-10 04:29:44 -05:00
parent 99c72543ab
commit ebbf002a73
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nginx/snippets/security-headers-base.conf
View File

@ -10,5 +10,5 @@ add_header Expect-CT "enforce, max-age=63072000" always;
# obsolete and replaced with Content-Security-Policy frame-ancestors 'none'
add_header X-Frame-Options "DENY" always;
# obsolete and replaced with strong Content-Security-Policy
add_header X-XSS-Protection "1; mode=block" always;
# obsolete, unsafe and replaced with strong Content-Security-Policy
add_header X-XSS-Protection "0" always;