From aa07673480b73f18d8ce0955534d68e13d12e688 Mon Sep 17 00:00:00 2001 From: Philip Forsberg Date: Thu, 14 Nov 2024 14:23:48 +0100 Subject: [PATCH] fix: nginx --- .docker/resources/nginx.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.docker/resources/nginx.conf b/.docker/resources/nginx.conf index 6d723b34..4cf0551a 100644 --- a/.docker/resources/nginx.conf +++ b/.docker/resources/nginx.conf @@ -19,7 +19,7 @@ http { server_tokens off; # https://scotthelme.co.uk/hardening-your-http-response-headers - add_header Content-Security-Policy "default-src 'self'; img-src 'self' data: https://www.diamonds.etimo.se https://diamonds.etimo.se; + add_header Content-Security-Policy "default-src 'self'; img-src 'self' data: https://www.diamonds.etimo.se https://diamonds.etimo.se;" add_header Strict-Transport-Security "max-age=31536000; includeSubdomains" always; add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Xss-Protection "1; mode=block" always;