Add X-Permitted-Cross-Domain-Policies

Signed-off-by: Tommy <[email protected]>
TommyTran732 · Oct 13, 2024 · ba55409 · ba55409
1 parent 11189cf
commit ba55409
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/etc/nginx/snippets/security.conf b/etc/nginx/snippets/security.conf
@@ -13,6 +13,9 @@ add_header X-Content-Type-Options "nosniff" always;
 proxy_hide_header X-Frame-Options;
 add_header X-Frame-Options "SAMEORIGIN" always;
 
+proxy_hide_header X-Permitted-Cross-Domain-Policies;
+add_header X-Permitted-Cross-Domain-Policies "none" always;
+
 # Obsolete and replaced by Content-Security-Policy
 # Only here to pass Hardenize checks
 proxy_hide_header X-XSS-Protection;