Skip to content

Instantly share code, notes, and snippets.

@vcsjones

vcsjones/headers.conf

Created September 2, 2016 01:54
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save vcsjones/4f2666615fb0cc25c6043da4828d9089 to your computer and use it in GitHub Desktop.
Save vcsjones/4f2666615fb0cc25c6043da4828d9089 to your computer and use it in GitHub Desktop.
Download ZIP
headers
Raw
headers.conf
add_header X-Frame-Options DENY;
add_header Content-Security-Policy "default-src 'none' ; style-src 'self' ; img-src 'self' ; frame-ancestors 'none' ; form-action 'none' ; block-all-mixed-content; reflected-xss block; sandbox; referrer no-referrer";
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header Referrer-Policy no-referrer;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment