From 1c25a0192c14eca9d24dcbf870e5cfc5a3337056 Mon Sep 17 00:00:00 2001 From: Sam Van Campenhout Date: Wed, 13 Oct 2021 16:01:52 +0200 Subject: [PATCH] Add the `always` param to the X-Frame-Options header This ensures that the header is added to all responses regardless of response code. More information: http://nginx.org/en/docs/http/ngx_http_headers_module.html --- config/frontend/add-x-frame-options-header.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/frontend/add-x-frame-options-header.conf b/config/frontend/add-x-frame-options-header.conf index 7f4234b..a7509f6 100644 --- a/config/frontend/add-x-frame-options-header.conf +++ b/config/frontend/add-x-frame-options-header.conf @@ -1,3 +1,3 @@ location / { - add_header X-Frame-Options "DENY"; + add_header X-Frame-Options "DENY" always; } \ No newline at end of file