Add some common security headers for all sites

This commit is contained in:
Marko Korhonen 2023-04-04 01:00:48 +03:00
parent 4c1f264e2a
commit f795a49720

View file

@ -5,7 +5,11 @@ korhonen.cc, *.korhonen.cc {
} }
header { header {
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
X-Frame-Options DENY
X-XSS-Protection 0
X-Content-Type-Options nosniff
Referrer-Policy strict-origin-when-cross-origin
} }
@homepage host korhonen.cc @homepage host korhonen.cc