From b4b9552579ca6f09bf5effd173ff889d34afe7b6 Mon Sep 17 00:00:00 2001 From: mbugeia Date: Wed, 14 Oct 2015 16:51:31 +0200 Subject: [PATCH] Disable HSTS header since nginx take care of that --- conf/config.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/config.php b/conf/config.php index 59c560c..f7d556c 100644 --- a/conf/config.php +++ b/conf/config.php @@ -183,7 +183,7 @@ define('REVERSE_PROXY_DEFAULT_DOMAIN', 'yuno_domain'); define('REMEMBER_ME_AUTH', false); // Enable or disable "Strict-Transport-Security" HTTP header -define('ENABLE_HSTS', true); +define('ENABLE_HSTS', false); // Enable or disable "X-Frame-Options: DENY" HTTP header define('ENABLE_XFRAME', true);