Browse Source

Use "always" condition for security headers

Signed-off-by: J0WI <J0WI@users.noreply.github.com>
tags/v17.0.0beta1
J0WI 4 years ago
parent
commit
bd9403d3da
No account linked to committer's email address
1 changed files with 7 additions and 7 deletions
  1. 7
    7
      .htaccess

+ 7
- 7
.htaccess View File

@@ -11,13 +11,13 @@

<IfModule mod_env.c>
# Add security and privacy related headers
Header set Referrer-Policy "no-referrer"
Header set X-Content-Type-Options "nosniff"
Header set X-Download-Options "noopen"
Header set X-Frame-Options "SAMEORIGIN"
Header set X-Permitted-Cross-Domain-Policies "none"
Header set X-Robots-Tag "none"
Header set X-XSS-Protection "1; mode=block"
Header always set Referrer-Policy "no-referrer"
Header always set X-Content-Type-Options "nosniff"
Header always set X-Download-Options "noopen"
Header always set X-Frame-Options "SAMEORIGIN"
Header always set X-Permitted-Cross-Domain-Policies "none"
Header always set X-Robots-Tag "none"
Header always set X-XSS-Protection "1; mode=block"
SetEnv modHeadersAvailable true
</IfModule>


Loading…
Cancel
Save