Add X-Frame-Options header to prevent clickjacking

5 years ago · 29d187e226
1 changed files with 2 additions and 0 deletions
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@ -2,6 +2,8 @@ server {
    listen 80;
    charset utf-8;

+    add_header X-Frame-Options DENY;
+
    location / {
        root /var/www/html;
        try_files $uri $uri/ /index.html;