Skip to content

Instantly share code, notes, and snippets.

@miljan-aleksic

miljan-aleksic/.htaccess

Last active January 5, 2017 04:46
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save miljan-aleksic/6cef3f668bfb58cb8167bd96c4cd021a to your computer and use it in GitHub Desktop.
Save miljan-aleksic/6cef3f668bfb58cb8167bd96c4cd021a to your computer and use it in GitHub Desktop.
Download ZIP
Apache Standard Security Headers
Raw
.htaccess
## Security Headers - as recommended at https://securityheaders.io ##
Header Set Strict-Transport-Security "max-age=31536000; includeSubDomains"
Header Set Content-Security-Policy "script-src 'self' *.google-analytics.com"
Header Set X-Frame-Options "SAMEORIGIN"
Header Set X-Content-Type-Options "nosniff"
Header Set X-XSS-Protection "1; mode=block"
## Security Headers ##
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment