Add hardening headers for user-uploaded files (#1244)
This commit is contained in:
parent
40dab49db2
commit
a61403023a
|
@ -63,6 +63,8 @@ server {
|
|||
add_header Cache-Control public;
|
||||
add_header 'Access-Control-Allow-Origin' '*';
|
||||
add_header X-Cache-Status $upstream_cache_status;
|
||||
add_header X-Content-Type-Options nosniff;
|
||||
add_header Content-Security-Policy "default-src 'none'; form-action 'none'";
|
||||
}
|
||||
}
|
||||
```
|
||||
|
|
Loading…
Reference in New Issue