diff options
Diffstat (limited to 'nginx/snippets/security-headers-base.conf')
| -rw-r--r-- | nginx/snippets/security-headers-base.conf | 12 |
1 files changed, 0 insertions, 12 deletions
diff --git a/nginx/snippets/security-headers-base.conf b/nginx/snippets/security-headers-base.conf deleted file mode 100644 index aa13ee38..00000000 --- a/nginx/snippets/security-headers-base.conf +++ /dev/null @@ -1,12 +0,0 @@ -add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always; -add_header X-Content-Type-Options "nosniff" always; -add_header Referrer-Policy "no-referrer" always; -add_header Cross-Origin-Opener-Policy "same-origin" always; -add_header Cross-Origin-Embedder-Policy "require-corp" always; -add_header Origin-Agent-Cluster "?1" always; - -# obsolete and replaced with Content-Security-Policy frame-ancestors 'none' -add_header X-Frame-Options "DENY" always; - -# obsolete, unsafe and replaced with strong Content-Security-Policy -add_header X-XSS-Protection "0" always; |