diff options
| -rw-r--r-- | config/application.rb | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/config/application.rb b/config/application.rb index 92aecc8fc..552f4ec11 100644 --- a/config/application.rb +++ b/config/application.rb @@ -38,7 +38,9 @@ module Mastodon end config.action_dispatch.default_headers = { - 'X-Frame-Options' => 'DENY' + 'X-Frame-Options' => 'DENY', + 'X-Content-Type-Options' => 'nosniff', + 'X-XSS-Protection' => '1; mode=block' } end end |