2
0
mirror of https://github.com/xcat2/confluent.git synced 2024-11-25 19:10:10 +00:00

Modify XSS-Protection directive

This commit is contained in:
Jarrod Johnson 2018-03-12 13:41:18 -04:00
parent 0f60fc6df7
commit 463f61fac7

View File

@ -400,7 +400,7 @@ def resourcehandler_backend(env, start_response):
('Pragma', 'no-cache'),
('X-Content-Type-Options', 'nosniff'),
('Content-Security-Policy', "default-src 'self'"),
('X-XSS-Protection', '1'), ('X-Frame-Options', 'deny'),
('X-XSS-Protection', '1; mode=block'), ('X-Frame-Options', 'deny'),
('Strict-Transport-Security', 'max-age=86400'),
('X-Permitted-Cross-Domain-Policies', 'none')]
reqbody = None