forked from infra/ansible
8 lines
342 B
Text
8 lines
342 B
Text
Header always set X-Xss-Protection "1; mode=block"
|
|
Header always set X-Content-Type-Options "nosniff"
|
|
Header always set Referrer-Policy "same-origin"
|
|
{% if env == 'pagure-staging' %}
|
|
Header always set X-Frame-Options "ALLOW-FROM https://stg.pagure.io/"
|
|
{% else %}
|
|
Header always set X-Frame-Options "ALLOW-FROM https://pagure.io/"
|
|
{% endif %}
|