From e3152e621693090bfed55f7aef0157911af3aac1 Mon Sep 17 00:00:00 2001 From: "Collin M. Barrett" Date: Sat, 23 Jan 2021 16:01:17 -0600 Subject: [PATCH] =?UTF-8?q?fix(reverse-proxy):=20=F0=9F=90=9B=F0=9F=9A=91?= =?UTF-8?q?=20mv=20add=5Fheader=20back=20to=20location?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- reverse-proxy/{svr-includes => loc-includes}/cors.conf | 0 reverse-proxy/{svr-includes => loc-includes}/csp.conf | 0 reverse-proxy/loc-includes/security.conf | 4 ++++ reverse-proxy/svr-includes/security.conf | 7 +------ 4 files changed, 5 insertions(+), 6 deletions(-) rename reverse-proxy/{svr-includes => loc-includes}/cors.conf (100%) rename reverse-proxy/{svr-includes => loc-includes}/csp.conf (100%) create mode 100644 reverse-proxy/loc-includes/security.conf diff --git a/reverse-proxy/svr-includes/cors.conf b/reverse-proxy/loc-includes/cors.conf similarity index 100% rename from reverse-proxy/svr-includes/cors.conf rename to reverse-proxy/loc-includes/cors.conf diff --git a/reverse-proxy/svr-includes/csp.conf b/reverse-proxy/loc-includes/csp.conf similarity index 100% rename from reverse-proxy/svr-includes/csp.conf rename to reverse-proxy/loc-includes/csp.conf diff --git a/reverse-proxy/loc-includes/security.conf b/reverse-proxy/loc-includes/security.conf new file mode 100644 index 000000000..84f1e815d --- /dev/null +++ b/reverse-proxy/loc-includes/security.conf @@ -0,0 +1,4 @@ +add_header X-Content-Type-Options "nosniff" always; +add_header X-Frame-Options "SAMEORIGIN" always; +add_header X-XSS-Protection "1; mode=block" always; +add_header Referrer-Policy "no-referrer" always; \ No newline at end of file diff --git a/reverse-proxy/svr-includes/security.conf b/reverse-proxy/svr-includes/security.conf index a90571540..b7a0bcba7 100644 --- a/reverse-proxy/svr-includes/security.conf +++ b/reverse-proxy/svr-includes/security.conf @@ -1,6 +1 @@ -server_tokens off; - -add_header X-Content-Type-Options "nosniff" always; -add_header X-Frame-Options "SAMEORIGIN" always; -add_header X-XSS-Protection "1; mode=block" always; -add_header Referrer-Policy "no-referrer" always; \ No newline at end of file +server_tokens off; \ No newline at end of file