Merge pull request #12099 from jbradberry/add-content-type-option-header

Add the X-Content-Type-Options nosniff header
This commit is contained in:
Jeff Bradberry 2022-04-28 14:41:02 -04:00 committed by GitHub
commit 2bef5ce09b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -22,6 +22,7 @@ server {
# HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)
add_header Strict-Transport-Security max-age=15768000;
add_header X-Content-Type-Options nosniff;
location /static/ {
root /awx_devel;
@ -84,6 +85,7 @@ server {
# HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)
add_header Strict-Transport-Security max-age=15768000;
add_header X-Content-Type-Options nosniff;
location /static/ {
root /awx_devel;