Changed iframe options

This commit is contained in:
2025-03-20 04:31:02 +01:00
parent 87ca1ccc11
commit 0611ddda11
8 changed files with 15 additions and 14 deletions

View File

@@ -74,6 +74,7 @@ http {
add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "noindex, nofollow" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Frame-Options "SAMEORIGIN" always;
{% include 'roles/nginx-docker-reverse-proxy/templates/iframe.conf.j2' %}
# Remove X-Powered-By, which is an information leak