added headers

RunOnFlux · Feb 26, 2023 · f60d214 · f60d214
1 parent 66cca56
commit f60d214
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/nginx.conf b/nginx.conf
@@ -6,7 +6,11 @@ events { worker_connections 1024; }
 http {
   include       /etc/nginx/mime.types;
   default_type  application/octet-stream;
-  add_header    X-Frame-Options SAMEORIGIN;
+  # Headers
+  add_header X-XSS-Protection "1; mode=block";
+  add_header Content-Security-Policy "default-src 'self'; font-src *;img-src * data:; script-src *; style-src *";
+  add_header X-Frame-Options "SAMEORIGIN";
+  add_header X-Content-Type-Options nosniff;
   sendfile on;
   tcp_nopush         on;
   tcp_nodelay        off;