changed nginx X-Frame-Option to SAMEORIGIN
This commit is contained in:
parent
b252c8c755
commit
934874b297
@ -136,5 +136,5 @@ server {
|
||||
}
|
||||
|
||||
# website should not be displayed inside a <frame>, an <iframe> or an <object>
|
||||
add_header X-Frame-Options DENY;
|
||||
add_header X-Frame-Options SAMEORIGIN;
|
||||
}
|
||||
|
@ -110,4 +110,8 @@ server {
|
||||
expires max;
|
||||
log_not_found off;
|
||||
}
|
||||
|
||||
|
||||
# website should not be displayed inside a <frame>, an <iframe> or an <object>
|
||||
add_header X-Frame-Options SAMEORIGIN;
|
||||
}
|
||||
|
@ -59,4 +59,7 @@ server {
|
||||
location ~ /\.ht {
|
||||
deny all;
|
||||
}
|
||||
|
||||
# website should not be displayed inside a <frame>, an <iframe> or an <object>
|
||||
add_header X-Frame-Options SAMEORIGIN;
|
||||
}
|
||||
|
@ -35,4 +35,7 @@ server {
|
||||
location ~ /\.ht {
|
||||
deny all;
|
||||
}
|
||||
|
||||
# website should not be displayed inside a <frame>, an <iframe> or an <object>
|
||||
add_header X-Frame-Options SAMEORIGIN;
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user