Nginx block unwanted open proxy, allow only POST, GET HEAD methods, No iframe embed - istenmedik acik proxy yi bloke et ve sadece POST GET HEAD methodlarine izin ver Iframe yerlestirmeyi yasakla

nginx.conf

http{
#...
     #hide server version 
     server_tokens off;
     
    # config to don't allow the browser to render the page inside an frame or iframe
    add_header X-Frame-Options SAMEORIGIN;

    server {
        listen       80;
        server_name  localhost;
        return 444;
        break;

        location / {
          # in every server block that contain location paste this
          if ($request_method !~ ^(GET|HEAD|POST)$ ){
                  return 444;
          }
        }
    }
#...
  include "/usr/localvirtual/*.conf"
}