nginx: I'm tired of people reporting the 'Report-Only' error message they see in the console. This is useless. Just get rid of it.

This commit is contained in:
Alexandre Aubin 2022-08-14 18:56:20 +02:00
parent 4e39c70123
commit 1246fcf8f6

View file

@ -29,7 +29,6 @@ ssl_dhparam /usr/share/yunohost/ffdhe2048.pem;
more_set_headers "Content-Security-Policy : upgrade-insecure-requests; default-src https: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval'";
{% else %}
more_set_headers "Content-Security-Policy : upgrade-insecure-requests";
more_set_headers "Content-Security-Policy-Report-Only : default-src https: wss: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval'";
{% endif %}
more_set_headers "X-Content-Type-Options : nosniff";
more_set_headers "X-XSS-Protection : 1; mode=block";