some security headers

2024-12-06 19:16:48 +01:00 · 2023-09-01 08:19:15 -04:00
parent 90f07bceeb
commit 0c7224a67a
1 changed files with 4 additions and 0 deletions
@@ -2,6 +2,10 @@ server {
    listen       8080;
    server_name  ${OPEN_SEARCH_HOST_FOR_NGINX} localhost;

+    add_header Content-Security-Policy "default-src 'none'; style-src 'self'; img-src 'self'";
+    add_header X-Frame-Options "DENY" always;
+    add_header X-Content-Type-Options "nosniff";
+
    root   /var/www/html;
    index  index.php;