From 913f8ce5db9ee7e732d16da88c95671098c85330 Mon Sep 17 00:00:00 2001 From: Arthur Lu Date: Mon, 22 May 2023 16:45:59 -0700 Subject: [PATCH] set X-Frame-Options to SAMEORIGIN --- proxy-params.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/proxy-params.conf b/proxy-params.conf index 2693d13..2b0c10d 100644 --- a/proxy-params.conf +++ b/proxy-params.conf @@ -13,7 +13,7 @@ proxy_set_header Host $host; proxy_hide_header X-Powered-By; proxy_hide_header X-Frame-Options; -add_header X-Frame-Options DENY; +add_header X-Frame-Options SAMEORIGIN; proxy_hide_header X-XSS-Protection; add_header X-XSS-Protection 0; proxy_hide_header X-Content-Type-Options;