From 93f56f4341c9bf7f9f5849f656b3dc1b47a7fa4f Mon Sep 17 00:00:00 2001
From: Tagada <36127788+Tagadda@users.noreply.github.com>
Date: Wed, 6 Mar 2024 14:34:39 +0100
Subject: [PATCH] Remove headers already present in core

Co-authored-by: Alexandre Aubin <4533074+alexAubin@users.noreply.github.com>
---
 conf/nginx.conf | 2 --
 1 file changed, 2 deletions(-)

diff --git a/conf/nginx.conf b/conf/nginx.conf
index e05466f..ca12fc8 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -5,8 +5,6 @@ set $api_domain "__DOMAIN__";
 set $files_domain "__DOMAIN__";
 ssl_ecdh_curve secp384r1;
 
-more_set_headers "X-XSS-Protection: 1; mode=block";
-more_set_headers "X-Content-Type-Options: nosniff";
 more_set_headers "Access-Control-Allow-Origin: ${allowed_origins}";
 more_set_headers "Access-Control-Allow-Credentials: true";
 # more_set_headers "X-Frame-Options: SAMEORIGIN";