From 0c7224a67aec4505bc4b8ff3dd4f61ed457fb704 Mon Sep 17 00:00:00 2001
From: Revvy <nothingtohide@revvy.de>
Date: Fri, 1 Sep 2023 08:19:15 -0400
Subject: [PATCH] some security headers

---
 docker/nginx.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docker/nginx.conf b/docker/nginx.conf
index ffbd92a..2901477 100644
--- a/docker/nginx.conf
+++ b/docker/nginx.conf
@@ -2,6 +2,10 @@ server {
     listen       8080;
     server_name  ${OPEN_SEARCH_HOST_FOR_NGINX} localhost;
 
+    add_header Content-Security-Policy "default-src 'none'; style-src 'self'; img-src 'self'";
+    add_header X-Frame-Options "DENY" always;
+    add_header X-Content-Type-Options "nosniff";
+
     root   /var/www/html;
     index  index.php;