Skip to content

Instantly share code, notes, and snippets.

@Chrissi2812

Chrissi2812/.htaccess

Last active July 27, 2018 10:10
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Chrissi2812/b477329e3e47837118f2d168f96d4e20 to your computer and use it in GitHub Desktop.
Save Chrissi2812/b477329e3e47837118f2d168f96d4e20 to your computer and use it in GitHub Desktop.
Download ZIP
Security Headers
Raw
.htaccess
<IfModule mod_headers.c>
# Disable malicious js in images
Header always set X-Content-Type-Options "nosniff"
# This forces https for all subdomains too!!
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
# Disallow iframing of website in other domains
Header always set X-Frame-Options "SAMEORIGIN"
# Protect Referrer
Header always set Referrer-Policy "no-referrer-when-downgrade, strict-origin-when-cross-origin"
# Dont tell what software is used to run the server
Header always unset X-Powered-By
Header always unset Server
</IfModule>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment