Merge pull request #7558 from bbodenmiller/patch-4

change X-Frame-Options to SAMEORIGIN for nginx SSL config
This commit is contained in:
Dmitriy Zaporozhets 2014-08-23 23:50:09 +03:00
commit eddfdc9edd
1 changed files with 1 additions and 1 deletions

View File

@ -84,7 +84,7 @@ server {
ssl_prefer_server_ciphers on;
add_header Strict-Transport-Security max-age=63072000;
add_header X-Frame-Options DENY;
add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
## Individual nginx logs for this GitLab vhost