|
|
|
@ -4,7 +4,7 @@
|
|
|
|
|
# Copyright 2022-2023 Jake Winters
|
|
|
|
|
# SPDX-License-Identifier: BSD-3-Clause-Clear
|
|
|
|
|
|
|
|
|
|
# Version: 6.0.0.5
|
|
|
|
|
# Version: 8.0.0.7
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# Server (unencrypted)
|
|
|
|
@ -55,8 +55,8 @@ server {
|
|
|
|
|
add_header Strict-Transport-Security "max-age=126200000; includeSubDomains; preload";
|
|
|
|
|
add_header X-Frame-Options "DENY";
|
|
|
|
|
add_header X-Content-Type-Options nosniff;
|
|
|
|
|
# add_header Content-Security-Policy "default-src 'self'";
|
|
|
|
|
add_header Referrer-Policy same-origin;
|
|
|
|
|
add_header Content-Security-Policy "default-src 'self'; img-src 'self'; media-src 'self'; object-src 'none'; script-src 'none'; connect-src 'none'; frame-src 'none'; style-src 'self'; font-src 'self'";
|
|
|
|
|
add_header Referrer-Policy no-referrer;
|
|
|
|
|
|
|
|
|
|
client_max_body_size 16m;
|
|
|
|
|
ignore_invalid_headers off;
|
|
|
|
|