1 files changed, 6 insertions, 0 deletions
diff --git a/config/application.rb b/config/application.rb
index d6a3aab15..552f4ec11 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -36,5 +36,11 @@ module Mastodon
     config.to_prepare do
       Doorkeeper::AuthorizationsController.layout 'auth'
     end
+
+    config.action_dispatch.default_headers = {
+      'X-Frame-Options' => 'DENY',
+      'X-Content-Type-Options' => 'nosniff',
+      'X-XSS-Protection' => '1; mode=block'
+    }
   end
 end