Merge pull request #7558 from bbodenmiller/patch-4
change X-Frame-Options to SAMEORIGIN for nginx SSL config
This commit is contained in:
commit
eddfdc9edd
|
@ -84,7 +84,7 @@ server {
|
|||
ssl_prefer_server_ciphers on;
|
||||
|
||||
add_header Strict-Transport-Security max-age=63072000;
|
||||
add_header X-Frame-Options DENY;
|
||||
add_header X-Frame-Options SAMEORIGIN;
|
||||
add_header X-Content-Type-Options nosniff;
|
||||
|
||||
## Individual nginx logs for this GitLab vhost
|
||||
|
|
Loading…
Reference in New Issue