Matrix-Mirrors/matrix.grapheneos.org
1
0
Fork 0
mirror of https://github.com/GrapheneOS/matrix.grapheneos.org.git synced 2024-06-18 06:49:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

explicitly block mixed content

Browse Source
This commit is contained in:
Daniel Micay 2021-06-18 05:08:04 -04:00
parent 144698a02f
commit 391d7ef680
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
nginx/nginx.conf
View File

@ -89,7 +89,7 @@ http {
root /usr/share/webapps/element;
include snippets/security-headers.conf;
add_header Content-Security-Policy "frame-ancestors 'self'";
add_header Content-Security-Policy "frame-ancestors 'self'; block-all-mixed-content";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Robots-Tag "none";
}
@ -102,7 +102,7 @@ http {
root /var/empty;
include snippets/security-headers.conf;
add_header Content-Security-Policy "frame-ancestors 'none'";
add_header Content-Security-Policy "frame-ancestors 'none'; block-all-mixed-content";
add_header X-Frame-Options "DENY";
location = / {
@ -113,7 +113,7 @@ http {
proxy_hide_header Content-Security-Policy;
proxy_hide_header X-Frame-Options;
include snippets/security-headers.conf;
add_header Content-Security-Policy "frame-ancestors 'none'";
add_header Content-Security-Policy "frame-ancestors 'none'; block-all-mixed-content";
add_header X-Frame-Options "DENY";
add_header X-Robots-Tag "none";