mirror of https://github.com/MISP/misp-docker
remove doubled X-XSS-Protection Header
since it gets already set by MISP itselfpull/204/head
parent
654ac748f3
commit
3a219de8ad
|
@ -11,7 +11,6 @@ add_header X-Download-Options "noopen" always;
|
|||
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
add_header X-Permitted-Cross-Domain-Policies "none" always;
|
||||
add_header X-Robots-Tag "none" always;
|
||||
add_header X-XSS-Protection "1; mode=block" always;
|
||||
|
||||
# remove X-Powered-By and nginx version, which is an information leak
|
||||
fastcgi_hide_header X-Powered-By;
|
||||
|
|
Loading…
Reference in New Issue