Add CSP changes

2023-07-06 19:44:01 +05:30
parent 6b25821972
commit 56896d2d63
1 changed files with 2 additions and 0 deletions
--- a/nginx/mastodon.conf
+++ b/nginx/mastodon.conf
@@ -89,6 +89,8 @@ server {
  location ~ ^/system/ {
    add_header Cache-Control "public, max-age=2419200, immutable";
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";
+    add_header X-Content-Type-Options nosniff;
+    add_header Content-Security-Policy "default-src 'none'; form-action 'none'";
    try_files $uri =404;
  }