about summary refs log tree commit diff
path: root/config
diff options
context:
space:
mode:
authorEugen Rochko <eugen@zeonfederated.com>2016-11-02 13:12:18 +0100
committerEugen Rochko <eugen@zeonfederated.com>2016-11-02 13:12:18 +0100
commita59d10d3df21befac6da57d92aed3087b7c10d6a (patch)
tree1c4fae4d1290e0a7ff1e7eacc45c412a87d48af3 /config
parent9467b900a27fd646952cbf37f7542765881dceac (diff)
Fix missing default headers
Diffstat (limited to 'config')
-rw-r--r--config/application.rb4
1 files changed, 3 insertions, 1 deletions
diff --git a/config/application.rb b/config/application.rb
index 92aecc8fc..552f4ec11 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -38,7 +38,9 @@ module Mastodon
     end
 
     config.action_dispatch.default_headers = {
-      'X-Frame-Options' => 'DENY'
+      'X-Frame-Options' => 'DENY',
+      'X-Content-Type-Options' => 'nosniff',
+      'X-XSS-Protection' => '1; mode=block'
     }
   end
 end