Merge pull request #633 from doccano/feature/security-enhancement

Update nginx.conf to enhance security
4 years ago · fa39e8908c
1 changed files with 2 additions and 0 deletions
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@ -3,6 +3,8 @@ server {
    charset utf-8;

    add_header X-Frame-Options DENY;
+    add_header X-Content-Type-Options nosniff;
+    add_header X-XSS-Protection "1; mode=block";

    location / {
        root /var/www/html;