some extra headers (#285)
Reviewed-on: #285 Co-authored-by: paspo <paolo@asperti.com> Co-committed-by: paspo <paolo@asperti.com>
This commit is contained in:
parent
438d11b934
commit
fd8a6ad919
@ -7,6 +7,13 @@ server {
|
||||
root /wwwroot;
|
||||
index index.html;
|
||||
|
||||
location ~ .* {
|
||||
add_header X-Frame-Options "SAMEORIGIN";
|
||||
add_header X-Content-Type-Options "nosniff";
|
||||
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload";
|
||||
add_header Content-Security-Policy "default-src 'self'; img-src https://*; child-src 'none';";
|
||||
}
|
||||
|
||||
location ~ ^/feed {
|
||||
rewrite ^/feed$ /it/index.xml last;
|
||||
rewrite ^/feed/.*$ /it/index.xml last;
|
||||
@ -36,7 +43,6 @@ server {
|
||||
location ~ .* {
|
||||
error_page 404 /it/404.html;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
gzip on;
|
||||
|
Loading…
x
Reference in New Issue
Block a user