bachir/debion-web-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

changed nginx X-Frame-Option to SAMEORIGIN

Browse Source
This commit is contained in:
Bachir Soussi Chiadmi 2019-04-29 13:07:14 +02:00
parent b252c8c755
commit 934874b297
4 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
assets/drupal-ssl.nginxconf
View File

@ -136,5 +136,5 @@ server {
} }
# website should not be displayed inside a <frame>, an <iframe> or an <object> # website should not be displayed inside a <frame>, an <iframe> or an <object>
add_header X-Frame-Options DENY; add_header X-Frame-Options SAMEORIGIN;
} }

4
assets/drupal.nginxconf
View File

@ -110,4 +110,8 @@ server {
expires max; expires max;
log_not_found off; log_not_found off;
} }
# website should not be displayed inside a <frame>, an <iframe> or an <object>
add_header X-Frame-Options SAMEORIGIN;
} }

3
assets/simple-phpfpm-ssl.nginxconf
View File

@ -59,4 +59,7 @@ server {
location ~ /\.ht { location ~ /\.ht {
deny all; deny all;
} }
# website should not be displayed inside a <frame>, an <iframe> or an <object>
add_header X-Frame-Options SAMEORIGIN;
} }

3
assets/simple-phpfpm.nginxconf
View File

@ -35,4 +35,7 @@ server {
location ~ /\.ht { location ~ /\.ht {
deny all; deny all;
} }
# website should not be displayed inside a <frame>, an <iframe> or an <object>
add_header X-Frame-Options SAMEORIGIN;
} }