Merge pull request #12099 from jbradberry/add-content-type-option-header

Add the X-Content-Type-Options nosniff header
This commit is contained in:
Jeff Bradberry
2022-04-28 14:41:02 -04:00
committed by GitHub

View File

@@ -22,6 +22,7 @@ server {
# HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)
add_header Strict-Transport-Security max-age=15768000;
add_header X-Content-Type-Options nosniff;
location /static/ {
root /awx_devel;
@@ -84,6 +85,7 @@ server {
# HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)
add_header Strict-Transport-Security max-age=15768000;
add_header X-Content-Type-Options nosniff;
location /static/ {
root /awx_devel;