Commit eddfdc9e authored by Dmitriy Zaporozhets's avatar Dmitriy Zaporozhets

Merge pull request #7558 from bbodenmiller/patch-4

change X-Frame-Options to SAMEORIGIN for nginx SSL config
parents 3cbacad8 a3953a46
...@@ -84,7 +84,7 @@ server { ...@@ -84,7 +84,7 @@ server {
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
add_header Strict-Transport-Security max-age=63072000; add_header Strict-Transport-Security max-age=63072000;
add_header X-Frame-Options DENY; add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff; add_header X-Content-Type-Options nosniff;
## Individual nginx logs for this GitLab vhost ## Individual nginx logs for this GitLab vhost
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment