update @ Fri 18 Mar 16:03:32 EET 2022

Signed-off-by: Ari Archer <ari.web.xyz@gmail.com>
This commit is contained in:
Ari Archer 2022-03-18 16:03:32 +02:00
parent f445943237
commit 01dadd899b

View file

@ -114,11 +114,10 @@
for = "/*" for = "/*"
[headers.values] [headers.values]
X-XSS-Protection = "1; mode=block"
Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload" Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
X-Frame-Options = "deny" X-Frame-Options = "deny"
X-Content-Type-Options = "nosniff" X-Content-Type-Options = "nosniff"
Content-Security-Policy = "upgrade-insecure-requests" Content-Security-Policy = "upgrade-insecure-requests; reflected-xss"
X-Permitted-Cross-Domain-Policies = "none" X-Permitted-Cross-Domain-Policies = "none"
Referrer-Policy = "no-referrer" Referrer-Policy = "no-referrer"
Clear-Site-Data = "cookies" Clear-Site-Data = "cookies"