From 870d575160dae824632792626a9003f3f292acec Mon Sep 17 00:00:00 2001 From: DDATAA <45762540+Ddataa@users.noreply.github.com> Date: Fri, 24 Mar 2023 14:27:58 +0000 Subject: [PATCH] Update nginx.conf Not super comfortable with those three lines :/ There's already https://github.com/YunoHost/yunohost/blob/dev/conf/nginx/server.tpl.conf#L52 and https://github.com/YunoHost/yunohost/blob/dev/conf/nginx/security.conf.inc#L33-L34 --- conf/nginx.conf | 3 --- 1 file changed, 3 deletions(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index 4d9c445..f3e1778 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -4,9 +4,6 @@ set $allowed_origins "https://${sandbox_domain}"; set $api_domain "__DOMAIN__"; set $files_domain "__DOMAIN__"; ssl_ecdh_curve secp384r1; -more_set_headers "Strict-Transport-Security: max-age=31536000; includeSubDomains; always"; -more_set_headers "X-XSS-Protection: '1; mode=block'"; -more_set_headers "X-Content-Type-Options: nosniff"; more_set_headers "Access-Control-Allow-Origin: '${allowed_origins}'"; more_set_headers "Cross-Origin-Resource-Policy: cross-origin"; more_set_headers "Cross-Origin-Embedder-Policy: require-corp";