Commit 0cc30145 authored by Sytse Sijbrandij's avatar Sytse Sijbrandij

Merge pull request #7664 from bbodenmiller/patch-2

add HSTS Policy warning
parents f74dba8c 765eabea
...@@ -72,6 +72,8 @@ server { ...@@ -72,6 +72,8 @@ server {
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
## [WARNING] The following header states that the browser should only communicate
## with your server over a secure connection for the next 24 months.
add_header Strict-Transport-Security max-age=63072000; add_header Strict-Transport-Security max-age=63072000;
add_header X-Frame-Options SAMEORIGIN; add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff; add_header X-Content-Type-Options nosniff;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment