diff options
| author | Thomas Müller <thomas.mueller@tmit.eu> | 2016-01-13 10:33:58 +0100 |
|---|---|---|
| committer | Thomas Müller <thomas.mueller@tmit.eu> | 2016-01-13 10:33:58 +0100 |
| commit | b1ee51f25577e4c407f525c740692d57b928b30b (patch) | |
| tree | 18f89f1b74093d48725c6a83ab3469a8795325de /lib/private/response.php | |
| parent | 5565b19382d08df427fbdcf806c2a408a11f7207 (diff) | |
| parent | 4d0dcd3c53a4c8c9944bc23d41de71593c3bd5d6 (diff) | |
| download | nextcloud-server-b1ee51f25577e4c407f525c740692d57b928b30b.tar.gz nextcloud-server-b1ee51f25577e4c407f525c740692d57b928b30b.zip | |
Merge pull request #21630 from owncloud/add-some-security-headers-as-hardening
Add X-Download-Options and X-Permitted-Cross-Domain-Policies
Diffstat (limited to 'lib/private/response.php')
| -rw-r--r-- | lib/private/response.php | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/private/response.php b/lib/private/response.php index c839bd3abea..5c7eb9b52d5 100644 --- a/lib/private/response.php +++ b/lib/private/response.php @@ -260,6 +260,8 @@ class OC_Response { header('X-Content-Type-Options: nosniff'); // Disable sniffing the content type for IE header('X-Frame-Options: Sameorigin'); // Disallow iFraming from other domains header('X-Robots-Tag: none'); // https://developers.google.com/webmasters/control-crawl-index/docs/robots_meta_tag + header('X-Download-Options: noopen'); // https://msdn.microsoft.com/en-us/library/jj542450(v=vs.85).aspx + header('X-Permitted-Cross-Domain-Policies: none'); // https://www.adobe.com/devnet/adobe-media-server/articles/cross-domain-xml-for-streaming.html } } |