mirror of
https://github.com/GrapheneOS/matrix.grapheneos.org.git
synced 2025-01-18 02:47:20 -05:00
stop setting CORP header for synapse API for now
This commit is contained in:
parent
9b19b811ac
commit
90d542e2f4
@ -120,7 +120,6 @@ http {
|
||||
proxy_hide_header X-Frame-Options;
|
||||
|
||||
include snippets/security-headers.conf;
|
||||
add_header Cross-Origin-Resource-Policy "cross-origin" always;
|
||||
add_header Content-Security-Policy "font-src 'none'; manifest-src 'none'; object-src 'none'; script-src 'none'; style-src 'none'; frame-ancestors 'none'; block-all-mixed-content" always;
|
||||
# obsolete and replaced with Content-Security-Policy frame-ancestors 'none'
|
||||
add_header X-Frame-Options "DENY" always;
|
||||
|
Loading…
Reference in New Issue
Block a user