CGM_Public/pretix_original
3
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-08-21 12:36:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add more security headers (#458)

Browse Source 
* Include some missing security headers

This change adds the following security headers:
* X-Content-Type-Options to prevent content type sniffing
* Referrer-Policy to prevent leaking referrer information when navigating away from the instance

* Migrate from Docker sample to manual configuration

Migrate the additional security headers from the Docker configuration sample to the manual configuration guide.
This commit is contained in:
BenBE
2017-04-06 17:30:26 +02:00
committed by Raphael Michel
parent 5048963aa2
commit 602947a3d7
2 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/admin/installation/manual_smallscale.rst
+3
View File
@@ -213,6 +213,9 @@ The following snippet is an example on how to configure a nginx proxy for pretix
ssl_certificate /path/to/cert.chain.pem;
ssl_certificate_key /path/to/key.pem;
add_header Referrer-Options same-origin;
add_header X-Content-Type-Options nosniff;
location / {
proxy_pass http://localhost:8345/;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;