changed nginx X-Frame-Option to SAMEORIGIN

2019-04-29 13:07:14 +02:00
parent b252c8c755
commit 934874b297
4 changed files with 11 additions and 1 deletions
--- a/assets/simple-phpfpm-ssl.nginxconf
+++ b/assets/simple-phpfpm-ssl.nginxconf
@@ -59,4 +59,7 @@ server {
  location ~ /\.ht {
    deny all;
  }
+
+  # website should not be displayed inside a <frame>, an <iframe> or an <object>
+  add_header X-Frame-Options SAMEORIGIN;
 }