remove legacy Expect-CT header

This commit is contained in:
Daniel Micay 2022-08-11 13:52:52 -04:00
parent ff010aa945
commit a5c257d8a5

View File

@ -5,8 +5,5 @@ add_header Cross-Origin-Opener-Policy "same-origin" always;
add_header Cross-Origin-Embedder-Policy "require-corp" always;
add_header Origin-Agent-Cluster "?1" always;
# obsolete when client system time is correct
add_header Expect-CT "enforce, max-age=63072000" always;
# obsolete, unsafe and replaced with strong Content-Security-Policy
add_header X-XSS-Protection "0" always;