Merge pull request #1200 from jacksgt/patch-1

Nginx config: Remove line-breaks from STS header
This commit is contained in:
Morris Jobke
2019-01-28 11:42:11 +01:00
committed by GitHub

View File

@@ -61,8 +61,7 @@ webroot of your nginx installation. In this example it is
# Add headers to serve security related headers
# Before enabling Strict-Transport-Security headers please read into this
# topic first.
# add_header Strict-Transport-Security "max-age=15768000;
# includeSubDomains; preload;";
# add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
#
# WARNING: Only add the preload option once you read about
# the consequences in https://hstspreload.org/. This option
@@ -316,8 +315,7 @@ your nginx installation.
# to have those duplicated to the ones above)
# Before enabling Strict-Transport-Security headers please read
# into this topic first.
# add_header Strict-Transport-Security "max-age=15768000;
# includeSubDomains; preload;";
# add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;