Infini-DL360/web: adjust content type options and HSTS headers
This commit is contained in:
parent
8f8364e258
commit
43d993f864
1 changed files with 2 additions and 2 deletions
|
@ -50,7 +50,7 @@ let
|
|||
location ~ "/\..+" { deny all; }
|
||||
|
||||
add_header Content-Security-Policy "${cspString}";
|
||||
add_header X-Content-Type-Options "nosniff;";
|
||||
add_header X-Content-Type-Options "nosniff";
|
||||
'';
|
||||
|
||||
mkRedirect = to: ssl-optional // { globalRedirect = to; };
|
||||
|
@ -73,7 +73,7 @@ in
|
|||
extraConfig =
|
||||
websiteConfig
|
||||
+ ''
|
||||
add_header Strict-Transport-Security "max-age=2592000;";
|
||||
add_header Strict-Transport-Security "max-age=15768000;";
|
||||
'';
|
||||
};
|
||||
};
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue