diff --git a/conf/nginx.conf b/conf/nginx.conf index 4d9c445..f3e1778 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -4,9 +4,6 @@ set $allowed_origins "https://${sandbox_domain}"; set $api_domain "__DOMAIN__"; set $files_domain "__DOMAIN__"; ssl_ecdh_curve secp384r1; -more_set_headers "Strict-Transport-Security: max-age=31536000; includeSubDomains; always"; -more_set_headers "X-XSS-Protection: '1; mode=block'"; -more_set_headers "X-Content-Type-Options: nosniff"; more_set_headers "Access-Control-Allow-Origin: '${allowed_origins}'"; more_set_headers "Cross-Origin-Resource-Policy: cross-origin"; more_set_headers "Cross-Origin-Embedder-Policy: require-corp";