sjs/samhuri.net
1
0
Fork 0
mirror of https://github.com/samsonjs/samhuri.net.git synced 2026-03-25 09:05:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

tighten up security a bit

Browse source
This commit is contained in:
Sami Samhuri 2018-09-10 20:04:18 -07:00
parent bfae83019b
commit b04202d4ad
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
public/.htaccess
View file

@ -26,6 +26,15 @@ ExpiresDefault A259200
# Add HSTS header https://tools.ietf.org/html/rfc6797
Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" env=HTTPS
# Block pages from loading when they detect reflected XSS attacks
Header set X-XSS-Protection "1; mode=block"
# Prevent browsers from incorrectly detecting non-scripts as scripts
Header set X-Content-Type-Options "nosniff"
# Block site from being framed
Header set X-Frame-Options "DENY"
################
### Rewrites ###
################