kotovalexarian/fedihub-ansible
Archived
1
0
Fork 0
Code Activity

Add Referrer-Policy

Browse source
This commit is contained in:
Alex Kotov 2020-07-04 09:36:40 +05:00
parent 3f68862fa3
commit 2476d055aa
Signed by: kotovalexarian
GPG key ID: 553C0EBBEB5D5F08
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
roles/matrix/templates/nginx/matrix.conf
View file

@ -11,6 +11,7 @@ server {
set $CSP "${CSP}form-action 'none';";
add_header Content-Security-Policy $CSP always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Frame-Options "SAMEORIGIN" always;
@ -34,6 +35,7 @@ server {
set $CSP "${CSP}form-action 'none';";
add_header Content-Security-Policy $CSP always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Frame-Options "SAMEORIGIN" always;
@ -67,6 +69,7 @@ server {
set $CSP "${CSP}form-action 'none';";
add_header Content-Security-Policy $CSP always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Frame-Options "SAMEORIGIN" always;