etc/nginx/sites-availble: add X-Frame-Options

This commit is contained in:
Aminda Suomalainen 2015-08-20 20:36:32 +03:00
parent b2eaca582a
commit 3a32185433
3 changed files with 3 additions and 0 deletions

View File

@ -32,6 +32,7 @@ server {
# Enable this if your want HSTS (recommended)
add_header Strict-Transport-Security "max-age=15552000; includeSubdomains; preload";
add_header X-Frame-Options SAMEORIGIN;
# OCSP Stapling ---
# fetch OCSP records from URL in ssl_certificate and cache them

View File

@ -6,6 +6,7 @@ server {
# Enable this if your want HSTS (recommended)
add_header Strict-Transport-Security "max-age=15552000; includeSubdomains; preload";
add_header X-Frame-Options SAMEORIGIN;
server_name something.example.org;

View File

@ -8,6 +8,7 @@ server {
# Enable this if your want HSTS (recommended)
add_header Strict-Transport-Security "max-age=15552000; includeSubdomains; preload";
add_header X-Frame-Options SAMEORIGIN;
root /var/www/vhostdir;
index index.php index.html index.htm;