apache.vhost.xss.protection.no.indexes.conf

<VirtualHost *:80>
    ServerName hom.sgps.fortaleza.ce.gov.br
    DocumentRoot /var/www/meusistema
    ErrorLog ${APACHE_LOG_DIR}/meusistema_error.log
    CustomLog ${APACHE_LOG_DIR}/meusistema_access.log combined

    <Directory /var/www/meusistema/public>
            DirectoryIndex index.html index.php
            Options -Indexes
            AllowOverride All
            Order allow,deny
            Allow from all
    </Directory>

    <IfModule mod_headers.c>
         Header set X-Frame-Options SAMEORIGIN
         Header always set X-Content-Type-Options nosniff
         Header set X-XSS-Protection 1;mode=block
    </IfModule>
    
</VirtualHost>