diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2019-01-24 15:04:39 -0200 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2019-01-24 15:04:39 -0200 |
| commit | e60fa624d120620f7ac3c8c8a88dff76811c6376 (patch) | |
| tree | 75abcf558c231dfe75e68b560beff734c0923e42 | |
| parent | 2f89f6dfefd61bdab5e95a62d004a093e65bf136 (diff) | |
| download | puppet-nginx-e60fa624d120620f7ac3c8c8a88dff76811c6376.tar.gz puppet-nginx-e60fa624d120620f7ac3c8c8a88dff76811c6376.tar.bz2 | |
Some clickjacking protections
| -rw-r--r-- | templates/site-ssl.erb | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/templates/site-ssl.erb b/templates/site-ssl.erb index a370bc7..5b9ce04 100644 --- a/templates/site-ssl.erb +++ b/templates/site-ssl.erb @@ -12,6 +12,11 @@ server { # enable HSTS header add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; preload"; + # clickjacking protection + add_header X-Content-Type-Options nosniff; + add_header X-XSS-Protection "1; mode=block"; + add_header X-Frame-Options DENY; + location / { # preserve http header and set forwarded proto proxy_set_header Host $http_host; |