Add the X-Content-Type-Options nosniff header

This commit is contained in:
Jeff Bradberry 2022-04-25 13:45:16 -04:00
parent 677187a43e
commit 47d5a89f40

View File

@ -22,6 +22,7 @@ server {
# HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)
add_header Strict-Transport-Security max-age=15768000;
add_header X-Content-Type-Options nosniff;
location /static/ {
root /awx_devel;
@ -84,6 +85,7 @@ server {
# HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)
add_header Strict-Transport-Security max-age=15768000;
add_header X-Content-Type-Options nosniff;
location /static/ {
root /awx_devel;