add obsolete X-XSS-Protection header

This commit is contained in:
Daniel Micay 2021-06-18 04:38:26 -04:00
parent af4c95f166
commit f9a50f988a

View File

@ -3,3 +3,6 @@ add_header X-Content-Type-Options "nosniff" always;
# obsolete when client system time is correct
add_header Expect-CT "enforce, max-age=63072000" always;
# obsolete and replaced with strong Content-Security-Policy
add_header X-XSS-Protection "1; mode=block" always;