x-frame-options allow

Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
This commit is contained in:
2025-11-11 11:28:42 +01:00
parent 0b68f41715
commit c96d168b6d
-1
View File
@@ -12,7 +12,6 @@ http {
default_type application/octet-stream;
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options DENY;
add_header X-XSS-Protection "1; mode=block";
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; # HSTS
add_header Referrer-Policy no-referrer-when-downgrade; # Referrer policy