-
Notifications
You must be signed in to change notification settings - Fork 576
Conversation
web/security.conf
Outdated
# https://www.owasp.org/index.php/List_of_useful_HTTP_headers | ||
add_header X-XSS-Protection "1; mode=block"; | ||
|
||
# with Content Security Policy (CSP) enabled(and a browser that supports it(http://caniuse.com/#feat=contentsecuritypolicy), |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You can remove everything from here since it is commented :)
Good idea to add some security basics to our Nginx configuration ! |
Arf sorry I think I explained badly my point. I think you should keep all commented lines since they explained each options. But at the end of the file, some comments were useless since header
Also I'll apreciate if you can squash all your commits in just one. Not really important if you don't I'll do it at merge time ;) Thanks :) |
web/security.conf
Outdated
add_header X-XSS-Protection "1; mode=block"; | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Remove only the lines below. Not other commented before :)
fix |
Great ! Thanks again :) |
No description provided.