Add the always param to the X-Frame-Options header

This ensures that the header is added to all responses regardless of response code. More information: http://nginx.org/en/docs/http/ngx_http_headers_module.html
2021-10-13 16:01:52 +02:00
parent 6bdb5a7e57
commit 1c25a0192c
1 changed files with 1 additions and 1 deletions
--- a/config/frontend/add-x-frame-options-header.conf
+++ b/config/frontend/add-x-frame-options-header.conf
@@ -1,3 +1,3 @@
 location / {
-  add_header X-Frame-Options "DENY";
+  add_header X-Frame-Options "DENY" always;
 }