C4

2026-06-01 16:07:37 +02:00
parent 9fbc4e72cb
commit a321ee6c30
1 changed files with 7 additions and 0 deletions
@@ -24,6 +24,13 @@ http {
    listen 80;
    server_name _;

+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-Frame-Options "DENY" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
+    add_header Cross-Origin-Opener-Policy "same-origin" always;
+    add_header Cross-Origin-Resource-Policy "same-origin" always;
+
    location / {
      root /usr/share/nginx/html;
      try_files $uri $uri/ /index.html;