diff options
author | Claire <claire.github-309c@sitedethib.com> | 2023-07-06 14:31:37 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2023-07-06 14:31:37 +0200 |
commit | fed9cbfd2ba8db8bffb03f554c24d83b6f8aa059 (patch) | |
tree | 67cfa95286c5d8197adb72c6aeced355a40a8e72 /dist | |
parent | 000b8358034106c63fc69f4deeac8a6fb7b51f92 (diff) |
Add hardened headers to user-uploaded files (#25756)
Diffstat (limited to 'dist')
-rw-r--r-- | dist/nginx.conf | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/dist/nginx.conf b/dist/nginx.conf index bed4bd3db9f..fc68e9a6d12 100644 --- a/dist/nginx.conf +++ b/dist/nginx.conf @@ -109,6 +109,8 @@ server { location ~ ^/system/ { add_header Cache-Control "public, max-age=2419200, immutable"; add_header Strict-Transport-Security "max-age=63072000; includeSubDomains"; + add_header X-Content-Type-Options nosniff; + add_header Content-Security-Policy "default-src 'none'; form-action 'none'"; try_files $uri =404; } |