diff options
| author | Eugen Rochko <eugen@zeonfederated.com> | 2016-11-02 13:12:18 +0100 |
|---|---|---|
| committer | Eugen Rochko <eugen@zeonfederated.com> | 2016-11-02 13:12:18 +0100 |
| commit | a59d10d3df21befac6da57d92aed3087b7c10d6a (patch) | |
| tree | 1c4fae4d1290e0a7ff1e7eacc45c412a87d48af3 /config | |
| parent | 9467b900a27fd646952cbf37f7542765881dceac (diff) | |
Fix missing default headers
Diffstat (limited to 'config')
| -rw-r--r-- | config/application.rb | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/config/application.rb b/config/application.rb index 92aecc8fc..552f4ec11 100644 --- a/config/application.rb +++ b/config/application.rb @@ -38,7 +38,9 @@ module Mastodon end config.action_dispatch.default_headers = { - 'X-Frame-Options' => 'DENY' + 'X-Frame-Options' => 'DENY', + 'X-Content-Type-Options' => 'nosniff', + 'X-XSS-Protection' => '1; mode=block' } end end |