Skip to content

Instantly share code, notes, and snippets.

@romanoffs

romanoffs/Security Headers (nginx)

Last active June 16, 2018 22:08
Show Gist options
  • Save romanoffs/1a61974486ba5672970cdf7cf753f50b to your computer and use it in GitHub Desktop.
Save romanoffs/1a61974486ba5672970cdf7cf753f50b to your computer and use it in GitHub Desktop.
Download ZIP
Security Headers
Raw
Security Headers (nginx)
add_header X-XSS-Protection "1; mode=block";
add_header X-Frame-Options "SAMEORIGIN";
add_header Referrer-Policy "strict-origin-when-cross-origin";
add_header X-Download-Options "noopen";
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
add_header X-Content-Type-Options "nosniff";
add_header Content-Security-Policy-Report-Only "";
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment