diff --git a/nginx/common/security-headers.conf b/nginx/common/security-headers.conf index 6824dac..4bb4679 100644 --- a/nginx/common/security-headers.conf +++ b/nginx/common/security-headers.conf @@ -1,4 +1,3 @@ -add_header Strict-Transport-Security 'max-age=31536000; includeSubDomains; preload' always; add_header Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval';" always; add_header X-XSS-Protection "1; mode=block" always; add_header X-Frame-Options "SAMEORIGIN" always;