diff options
Diffstat (limited to 'nginx/nginx.conf')
| -rw-r--r-- | nginx/nginx.conf | 13 |
1 files changed, 6 insertions, 7 deletions
diff --git a/nginx/nginx.conf b/nginx/nginx.conf index ca2211d6..ebd0ab8d 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -238,6 +238,12 @@ http { try_files /favicon.svg =404; } + location = /mask-icon.svg { + include snippets/security-headers.conf; + add_header Cross-Origin-Resource-Policy "same-origin" always; + add_header Cache-Control "public, max-age=31536000, immutable"; + } + location ^~ /fonts/ { include snippets/security-headers.conf; add_header Cross-Origin-Resource-Policy "same-origin" always; @@ -258,13 +264,6 @@ http { add_header Cache-Control "public, max-age=31536000, immutable"; } - location ~ "\.svg$" { - include snippets/security-headers.conf; - # avoid breaking image hotlinking such as https://github.com/TryGhost/Ghost/issues/12880 - add_header Cross-Origin-Resource-Policy "cross-origin" always; - add_header Cache-Control "public, max-age=31536000"; - } - location ~ "\.png$" { include snippets/security-headers.conf; # avoid breaking image hotlinking such as https://github.com/TryGhost/Ghost/issues/12880 |