Merge pull request #2308 from appwrite/fix-http-security-headers

This commit is contained in:
Torsten Dittmann
2025-09-02 13:23:28 +02:00
committed by GitHub
+6 -6
View File
@@ -6,12 +6,6 @@ server {
root /usr/share/nginx/html;
# Security headers for all locations
add_header X-UA-Compatible "IE=Edge";
add_header X-Frame-Options SAMEORIGIN;
add_header X-XSS-Protection "1; mode=block;";
add_header X-Content-Type-Options nosniff;
# Only cache files in /console/_app/immutable/ for 1 year
location /console/_app/immutable/ {
try_files $uri =404;
@@ -35,6 +29,12 @@ server {
expires 0;
add_header Cache-Control "no-cache, no-store";
add_header Pragma "no-cache";
# Security headers
add_header X-UA-Compatible "IE=Edge";
add_header X-Frame-Options SAMEORIGIN;
add_header X-XSS-Protection "1; mode=block;";
add_header X-Content-Type-Options nosniff;
}
location / {