Add x-frame-options when hosting frontend pages
We don't want these pages to be contained in a frame. The x-frame-options servers that use.
This commit is contained in:
3
config/frontend/add-x-frame-options-header.conf
Normal file
3
config/frontend/add-x-frame-options-header.conf
Normal file
@@ -0,0 +1,3 @@
|
||||
location / {
|
||||
add_header X-Frame-Options "DENY";
|
||||
}
|
||||
Reference in New Issue
Block a user