change referrer policy from same-origin to strict-origin

This commit is contained in:
2018-09-06 11:06:25 +02:00
parent d61466f37d
commit d38e918626

View File

@ -1,16 +1,16 @@
server { server {
listen 8888; listen 8888;
root /nextcloud; root /nextcloud;
fastcgi_buffers 64 4K; fastcgi_buffers 64 4K;
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"; add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload";
add_header X-Content-Type-Options nosniff; add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block"; add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none; add_header X-Robots-Tag none;
add_header X-Download-Options noopen; add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none; add_header X-Permitted-Cross-Domain-Policies none;
add_header Referrer-Policy "same-origin"; add_header Referrer-Policy "strict-origin";
location = /robots.txt { location = /robots.txt {
allow all; allow all;