set up COEP and CORP headers

This commit is contained in:
Daniel Micay 2021-06-18 20:20:50 -04:00
parent 87d3dff258
commit 444ad1a982
2 changed files with 4 additions and 0 deletions

View file

@ -1,5 +1,6 @@
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
add_header Cross-Origin-Opener-Policy "same-origin" always;
add_header Cross-Origin-Embedder-Policy "require-corp" always;
add_header X-Content-Type-Options "nosniff" always;
# obsolete when client system time is correct