Add default recommended headers

Since no more location directive is used, making these header
available everywhere is possible without breaking servers.
This commit is contained in:
Léo Colombaro 2019-02-10 22:20:05 +01:00
parent a4c9e2da8e
commit 283b292c5e
No known key found for this signature in database
GPG Key ID: 687B480A6D4F735F
1 changed files with 6 additions and 0 deletions

View File

@ -2,4 +2,10 @@
# https://github.com/h5bp/server-configs-nginx
include h5bp/internet_explorer/x-ua-compatible.conf;
include h5bp/security/content-security-policy.conf;
include h5bp/security/x-content-type-options.conf;
include h5bp/security/x-frame-options.conf;
include h5bp/security/x-xss-protection.conf;
include h5bp/location/security_file_access.conf;
include h5bp/web_performance/no-transform.conf;
include h5bp/cross-origin/requests.conf;