Skip to content

Instantly share code, notes, and snippets.

@daothanh

daothanh/nginx header security

Created April 11, 2019 08:35
Show Gist options
  • Save daothanh/19b64fa1ac1d8bfb9f32bb76f2f37bc8 to your computer and use it in GitHub Desktop.
Save daothanh/19b64fa1ac1d8bfb9f32bb76f2f37bc8 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
nginx header security
add_header X-XSS-Protection "1; mode=block";
add_header Content-Security-Policy "<policy>";
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
add_header Public-Key-Pins 'pin-sha256="<primary>"; pin-sha256="<backup>"; max-age=5184000; includeSubDomains';
add_header X-Content-Type-Options nosniff;
add_header Referrer-Policy "no-referrer";
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment