From 283b292c5ed64128cb32f1aba96a8276c89863c6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?L=C3=A9o=20Colombaro?= Date: Sun, 10 Feb 2019 22:20:05 +0100 Subject: [PATCH] Add default recommended headers Since no more location directive is used, making these header available everywhere is possible without breaking servers. --- h5bp/basic.conf | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/h5bp/basic.conf b/h5bp/basic.conf index fa23bee..24bd863 100644 --- a/h5bp/basic.conf +++ b/h5bp/basic.conf @@ -2,4 +2,10 @@ # https://github.com/h5bp/server-configs-nginx include h5bp/internet_explorer/x-ua-compatible.conf; +include h5bp/security/content-security-policy.conf; +include h5bp/security/x-content-type-options.conf; +include h5bp/security/x-frame-options.conf; +include h5bp/security/x-xss-protection.conf; include h5bp/location/security_file_access.conf; +include h5bp/web_performance/no-transform.conf; +include h5bp/cross-origin/requests.conf;