some extra headers (#285)
Some checks failed
Container Publish / build-image (push) Successful in 6m19s
Vulnerability Scan / Daily Vulnerability Scan (push) Failing after 14s

Reviewed-on: #285
Co-authored-by: paspo <paolo@asperti.com>
Co-committed-by: paspo <paolo@asperti.com>
This commit is contained in:
Paolo Asperti 2024-10-13 13:50:45 +00:00 committed by Paolo Asperti
parent 438d11b934
commit fd8a6ad919

View File

@ -7,6 +7,13 @@ server {
root /wwwroot;
index index.html;
location ~ .* {
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options "nosniff";
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload";
add_header Content-Security-Policy "default-src 'self'; img-src https://*; child-src 'none';";
}
location ~ ^/feed {
rewrite ^/feed$ /it/index.xml last;
rewrite ^/feed/.*$ /it/index.xml last;
@ -36,7 +43,6 @@ server {
location ~ .* {
error_page 404 /it/404.html;
}
}
gzip on;