mirror of
https://github.com/hoellen/docker-nextcloud.git
synced 2026-10-15 15:52:27 +00:00
disable legacy X-XSS-Protection
Obsolete, unsafe, and superseded by CSP
This commit is contained in:
1 parent
feae76b13a
commit
7611471834
1 file changed
+1
-1
@@ -22,7 +22,7 @@ server {
|
||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
add_header X-Permitted-Cross-Domain-Policies "none" always;
|
||||
add_header X-Robots-Tag "none" always;
|
||||
add_header X-XSS-Protection "1; mode=block" always;
|
||||
add_header X-XSS-Protection "0" always;
|
||||
|
||||
location = /robots.txt {
|
||||
allow all;
|
||||
|
||||
Reference in new issue
Block a user