mirror of
https://github.com/appwrite/console.git
synced 2026-06-06 19:27:48 +00:00
Merge pull request #2308 from appwrite/fix-http-security-headers
This commit is contained in:
+6
-6
@@ -6,12 +6,6 @@ server {
|
||||
|
||||
root /usr/share/nginx/html;
|
||||
|
||||
# Security headers for all locations
|
||||
add_header X-UA-Compatible "IE=Edge";
|
||||
add_header X-Frame-Options SAMEORIGIN;
|
||||
add_header X-XSS-Protection "1; mode=block;";
|
||||
add_header X-Content-Type-Options nosniff;
|
||||
|
||||
# Only cache files in /console/_app/immutable/ for 1 year
|
||||
location /console/_app/immutable/ {
|
||||
try_files $uri =404;
|
||||
@@ -35,6 +29,12 @@ server {
|
||||
expires 0;
|
||||
add_header Cache-Control "no-cache, no-store";
|
||||
add_header Pragma "no-cache";
|
||||
|
||||
# Security headers
|
||||
add_header X-UA-Compatible "IE=Edge";
|
||||
add_header X-Frame-Options SAMEORIGIN;
|
||||
add_header X-XSS-Protection "1; mode=block;";
|
||||
add_header X-Content-Type-Options nosniff;
|
||||
}
|
||||
|
||||
location / {
|
||||
|
||||
Reference in New Issue
Block a user