Add hardening headers for user-uploaded files (#1244)
This commit is contained in:
parent
40dab49db2
commit
a61403023a
|
@ -63,6 +63,8 @@ server {
|
||||||
add_header Cache-Control public;
|
add_header Cache-Control public;
|
||||||
add_header 'Access-Control-Allow-Origin' '*';
|
add_header 'Access-Control-Allow-Origin' '*';
|
||||||
add_header X-Cache-Status $upstream_cache_status;
|
add_header X-Cache-Status $upstream_cache_status;
|
||||||
|
add_header X-Content-Type-Options nosniff;
|
||||||
|
add_header Content-Security-Policy "default-src 'none'; form-action 'none'";
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
|
Loading…
Reference in New Issue