changed nginx X-Frame-Option to SAMEORIGIN

2019-04-29 13:09:22 +02:00
parent edc901da54
commit c892d4561a
4 changed files with 13 additions and 1 deletions
@@ -136,5 +136,5 @@ server {
  }

  # website should not be displayed inside a <frame>, an <iframe> or an <object>
-  add_header X-Frame-Options DENY;
+  add_header X-Frame-Options SAMEORIGIN;;
 }
@@ -110,4 +110,8 @@ server {
      expires max;
      log_not_found off;
    }
+
+    # website should not be displayed inside a <frame>, an <iframe> or an <object>
+    add_header X-Frame-Options SAMEORIGIN;;
+
 }
@@ -59,4 +59,8 @@ server {
  location ~ /\.ht {
    deny all;
  }
+
+  # website should not be displayed inside a <frame>, an <iframe> or an <object>
+  add_header X-Frame-Options SAMEORIGIN;;
+
 }
@@ -35,4 +35,8 @@ server {
  location ~ /\.ht {
    deny all;
  }
+
+  # website should not be displayed inside a <frame>, an <iframe> or an <object>
+  add_header X-Frame-Options SAMEORIGIN;;
+
 }