CGM_Public/pretix_original
3
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-08-18 12:06:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add more security headers (#458)

Browse Source 
* Include some missing security headers

This change adds the following security headers:
* X-Content-Type-Options to prevent content type sniffing
* Referrer-Policy to prevent leaking referrer information when navigating away from the instance

* Migrate from Docker sample to manual configuration

Migrate the additional security headers from the Docker configuration sample to the manual configuration guide.
This commit is contained in:
BenBE
2017-04-06 17:30:26 +02:00
committed by Raphael Michel
parent 5048963aa2
commit 602947a3d7
2 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deployment/docker/nginx.conf
+2
View File
@@ -22,9 +22,11 @@ http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
add_header X-Content-Type-Options nosniff;
access_log /var/log/nginx/access.log private;
error_log /var/log/nginx/error.log;
add_header Referrer-Policy same-origin
gzip on;
gzip_disable "msie6";