refactor: remove security headers from nginx configuration
This commit is contained in:
		@@ -4,13 +4,6 @@ server {
 | 
				
			|||||||
    root /usr/share/nginx/html;
 | 
					    root /usr/share/nginx/html;
 | 
				
			||||||
    index index.html;
 | 
					    index index.html;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    # Security headers
 | 
					 | 
				
			||||||
    add_header X-XSS-Protection "1; mode=block";
 | 
					 | 
				
			||||||
    add_header X-Content-Type-Options "nosniff";
 | 
					 | 
				
			||||||
    add_header X-Frame-Options "SAMEORIGIN";
 | 
					 | 
				
			||||||
    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';";
 | 
					 | 
				
			||||||
    add_header Referrer-Policy "strict-origin-when-cross-origin";
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
    location / {
 | 
					    location / {
 | 
				
			||||||
        try_files $uri $uri/ /index.html;
 | 
					        try_files $uri $uri/ /index.html;
 | 
				
			||||||
    }
 | 
					    }
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user