mirror of
https://github.com/alchemy-fr/Phraseanet.git
synced 2025-10-07 10:04:27 +00:00
7d23b7613b
* PHRAS-3892 set content security policies (csp) as env vars * fix diff from master * PHRAS-3892 update default scp add sources ---------
7 lines
389 B
Plaintext
7 lines
389 B
Plaintext
## Security headers for Nginx ##
|
|
add_header Strict-Transport-Security "max-age=15768000" always;
|
|
add_header X-Content-Type-Options "nosniff" always;
|
|
add_header X-Frame-Options "SAMEORIGIN" always;
|
|
add_header X-Xss-Protection "1; mode=block" always;
|
|
add_header Referrer-Policy strict-origin-when-cross-origin;
|
|
add_header Content-Security-Policy "$GATEWAY_CSP"; |