nune/privatebin-docker-nginx-fpm-alpine
nune/privatebin-docker-nginx-fpm-alpine
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

disable header preventing opening links to self, fixes #959

Browse source
This commit is contained in:
El RIDO 2022-07-31 08:49:36 +02:00
parent 1d74c1ae56
commit d6cead99eb
No known key found for this signature in database
GPG key ID: 0F5C940A6BD81F92
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
etc/nginx/http.d/site.conf
View file

@ -11,7 +11,10 @@ server {
# https://developers.cloudflare.com/cache/about/cache-control#other
add_header Cache-Control "public, max-age=3600, must-revalidate, no-transform";
add_header Cross-Origin-Embedder-Policy require-corp;
add_header Cross-Origin-Opener-Policy same-origin;
# disabled, because it prevents links from a paste to the same site to
# be opened. Didn't work with `same-origin-allow-popups` either.
# See issue #959 for details.
#add_header Cross-Origin-Opener-Policy same-origin;
add_header Cross-Origin-Resource-Policy same-origin;
add_header Referrer-Policy no-referrer;
add_header X-Content-Type-Options nosniff;