Skip to content

Instantly share code, notes, and snippets.

@mrkdevelopment
Created May 1, 2024 01:48
Show Gist options
  • Save mrkdevelopment/4eb3b65f1225a899d36c857b757e3d5a to your computer and use it in GitHub Desktop.
Save mrkdevelopment/4eb3b65f1225a899d36c857b757e3d5a to your computer and use it in GitHub Desktop.
Snippet for htaccess with no CSP
# Security Headers
<IfModule mod_headers.c>
Header set X-XSS-Protection "1; mode=block"
Header set X-Frame-Options "SAMEORIGIN"
Header set X-Content-Type-Options "nosniff"
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
</IfModule>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment